NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
netbsd netbsd 1.4.1