CPE
The su-exec utility up to version 0.3 suffers from integer truncation during user identifier parsing, allowing attackers to escalate privileges to root.