lpstat in IRIX 6.5.13f and previous versions allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.
sgi irix