Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and previous versions allows local users to execute arbitrary code.
isync mrouter 1.5