Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
http://www.securityfocus.com/bid/6715
http://www.iss.net/security_center/static/11193.php