The printers program in IRIX has a buffer overflow that gives root access to local users.
CVSS Metrics