ngircd -- format string vulnerability

A No System Group security advisory reports that ngircd is
vulnerable to a format string vulnerability in the
Log_Resolver() function of log.c, if IDENT
support is enabled. This could allow a remote attacker to
execute arbitrary code with the permissions of the ngircd
daemon, which is root by default.
Note: By default the FreeBSD ngircd port
does not enable IDENT support.