Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
sun sunos 5.5
sun sunos 5.5.1