CVE-2006-5556

CVE-2006-5556 describes a buffer overflow in the libc localtime_r function (and certain other functions) affecting HP-UX B.11.11 and possibly other versions. The vulnerability allows local users to execute arbitrary code by supplying a long TZ environment variable. The available documents confirm...