Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
kde kde 1.0