Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.Referenceshttp://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.htmlhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784