Debian Security Advisory 675-1 – hztty, a converter for GB, Big5 and zW/HZ Chinese encodings in a tty session, can be triggered to execute arbitrary commands with group utmp privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36144/dsa-675.txt
Source: https://packetstormsecurity.com/files/36144/dsa-675.txt.html