Steve Kemp has reported a vulnerability in ketm, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to a boundary error in support.c when formatting an error message for display. This can be exploited to cause a stack-based buffer overflow via an overly long command line argument and may be exploited to execute arbitrary code with group "games" privileges.

Solution
Apply updated packages.
Further details available in Customer Area

Provided and/or discovered by
Steve Kemp

Original Advisory
http://www.debian.org/security/2005/dsa-926

Deep Links
Links available in Customer Area