Debian Security Advisory DSA 513-1 – Jaguar discovered a format string vulnerability in log2mail, whereby a user able to log a specially crafted message to a logfile monitored by log2mail (for example, via syslog) could cause arbitrary code to be executed with the privileges of the log2mail process. Versions below 0.2.5.2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33501/dsa-513.txt
Source: https://packetstormsecurity.com/files/33501/dsa-513.txt.html