Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1551
http://www.securityfocus.com/bid/4089
http://www.iss.net/security_center/static/8989.php