Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openbsd | Openbsd | 2.3 (including) | 2.3 (including) |
| Openbsd | Openbsd | 2.4 (including) | 2.4 (including) |
| Openbsd | Openbsd | 2.5 (including) | 2.5 (including) |
| Openbsd | Openbsd | 2.6 (including) | 2.6 (including) |
| Openbsd | Openbsd | 2.7 (including) | 2.7 (including) |
| Linux | Redhat | 5.0 (including) | 5.0 (including) |
| Linux | Redhat | 5.1 (including) | 5.1 (including) |
| Linux | Redhat | 5.2 (including) | 5.2 (including) |