Description
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
References
- 20011127 [CERT-intexxia] libgtop_daemon Remote Format String Vulnerability mailing-list
- DSA-098 vendor-advisory