Format string bug on syslog() call and gile logging in NCSA format, cherokee_logger_ncsa_write_string().
vulners.com/securityvulns/securityvulns:doc:6119
vulners.com/securityvulns/securityvulns:doc:7116