переполнения буфера в yppassw (suid root), mailtool (sgid mail).
vulners.com/securityvulns/securityvulns:doc:1664
vulners.com/securityvulns/securityvulns:doc:1665
vulners.com/securityvulns/securityvulns:doc:2120