Format string vulnerability in mars_nwe 0.99.pl19 allows remote malicious users to execute arbitrary commands.
martin stover mars nwe 0.99_pl19