Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.
http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00197.html
http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196.html