privilege escalation vulnerability (CVE-2008-0162). Also verify the return values of setuid()/setgid().