Find real vulnerabilities before they ship
Vulnerability Database › CVE-2005-0392
ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.