Secunia

Gentoo has issued an update for mgetty. This fixes two vulnerabilities, which can be exploited to compromise a vulnerable system or escalate privileges.

Mgetty doesn't validate the user name supplied by the modem, when calling external programs. This allows malicious users to overflow the buffer and execute arbitrary code with root privileges.

Also, local users are able to circumvent the permissions in faxspool. This allows local users to send faxes regardless of permissions.

Solution
Update Gentoo:
Further details available in Customer Area

Deep Links
Links available in Customer Area