An old format string vulnerability in setuid versions of top has popped back up in the Solaris 10 Companion CD.