CVE-2003-0649
Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Date published : 2003-08-14
http://www.debian.org/security/2003/dsa-368
http://www.mandriva.com/security/advisories?name=MDKSA-2004:053