Find real vulnerabilities before they ship
Vulnerability Database › CVE-2000-0763
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.