Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
sun sunos 5.3
sun sunos 5.4
sun solaris 2.4