CVE-2000-0996 in OpenBSD
Summary
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
VulDB is the best source for vulnerability data and more expert information about this specific topic.