Secunia

A vulnerability has been identified in tcpflow, which potentially can be exploited by malicious, local users to escalate their privileges on a vulnerable system.

The vulnerability is caused due to a format string error in the handling of device names. This can be exploited by specifying a specially crafted argument containing format specifiers to the "-i" command line option.

Successful exploitation requires that tcpflow or a program calling it has higher privileges. By default, tcpflow runs with the user's privileges. However, some suid "root" network management tools are known to use tcpflow.

Solution
Update to version 0.21:
Further details available in Customer Area

Provided and/or discovered by
David Goldsmith, @stake

Original Advisory
http://www.atstake.com/research/advisories/2003/a080703-2.txt

Deep Links
Links available in Customer Area