Debian Security Advisory DSA-028-1 - Man has a format string vulnerability which leads to a local exploit for the man user.