Pound versions 1.5 and below local and remote format string exploit. Only works locally if pound is setuid.