Debian Linux Security Advisory 3227-1 - John Lightsey discovered a format string injection vulnerability in the localization of templates in Movable Type, a blogging system. An unauthenticated remote attacker could take advantage of this flaw to execute arbitrary code as the web server user. Continue reading...