Local socket-control access via wrong descriptor check

Incorrect authorization in Open-iSCSI allows local users to access the iscsiuio control socket and manipulate iSCSI sessions. The iscsid_loop handler passes the listening descriptor instead of the accepted client descriptor to mgmt_peeruser, so the client's credentials are not checked. Exploitation requires a local low-privileged account and a running iscsiuio service; unauthorized control can alter sessions and disrupt storage.