CVE:CVE-2006-4127
CNNVD:CNNVD-200608-202
DConnect Daemon 0.7.0及早期版本存在多个格式化字符串漏洞，由于从(a) cmd.user.c，(b) penalties.c，或 (c) cmd.dc.c程序调用(1) privmsg()函数或(2) pubmsg函数时，没有正确处理格式化字符串限定符，远程管理员可借助此漏洞执行任意代码。
solution:Upgrade dconnect dconnect_daemon to a higher version than 0.0.2,0.0.3,0.7.0,and avoid the version 0.0.2,0.0.3,0.7.0