/usr/Cadmin/bin/csetup is root/suid and buggy. It has a vulnerability that allows any local user to get root priviledges.