CVE-2006-3120

Osiris (osiris) vulnerable to a format-string flaw in its logging functions prior to version 4.2.1. A remote attacker could cause a denial of service (application crash) and potentially execute arbitrary code. Debian advisories indicate fixes: 4.0.6-1sarge1 for the stable (sarge) release and 4.2....