A stack overflow exists via user defined unbounds checked user supplied data sent to a sprintf(). Local users can obtain superuser privileges.