FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
freebsd freebsd 2.2