Launchpad.net

CVE 2005-0392

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.

See the CVE page on Mitre.org for more details.

References