Security Advisory
CVE-2004-1469
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.