Local privilege escalation via execve()