Description
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
References
- 1764 vdb-entry
- 20001006 talkd [WAS: Re: OpenBSD Security Advisory] mailing-list
- linux-talkd-overwrite-root(5344) vdb-entry