In Solaris, an SNMP subagent has a default community string that allows remote malicious users to execute arbitrary commands as root, or modify system parameters.
sun solaris 2.6