yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.
https://exchange.xforce.ibmcloud.com/vulnerabilities/46879
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html