sympa -- buffer overflow in "queue"

Erik Sjölund discovered a vulnerability in Sympa. The
queue application processes messages received via
aliases. It contains a buffer overflow in the usage of
sprintf. In some configurations, it may allow an
attacker to execute arbitrary code as the sympa
user.