Minicom XModem Format String Vulnerability
Minicom is a serial communication utility, often used to simplify dialup connections for UNIX hosts. It is included with many popular UNIX and UNIX derivative operating systems, and is a clone of the original Telix program for MS-DOS.
A problem in the design of the software makes it vulnerable to a format string attack. By executing the software, and attempting to send a file via xmodem with a format identifier in the name, it is possible exploit this format string vulnerability.
This makes it possible for a local user to gain an elevation of privileges equal to uucp.
Caldera Systems reports that OpenLinux does not permit exploitation of this vulnerability to yield root privilege to the attacker.