Secunia

Some vulnerabilities have been reported in Acon, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerabilities are caused due to multiple boundary errors in acon.c, menu.c, and child.c. These can be exploited to cause stack-based buffer overflows in the "acon" setuid root binary via e.g. an overly large $HOME environment variable or an overly large number of terminal columns.

NOTE: Other boundary errors may also be present.

The vulnerabilities are reported in version 1.0.5. Other versions may also be affected.

Solution
Restrict local access to trusted users only.
Further details available in Customer Area

Provided and/or discovered by
Reported by brian m. carlson and Helmut Grohne via the Debian bug tracking system.

Changelog
Further details available in Customer Area

Original Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603

Deep Links
Links available in Customer Area