Buffer overflow in Sun's ping program can give root access to local users.
sun sunos 5.3
sun sunos 5.4
sun sunos 5.5
sun sunos 5.5.1
sun sunos