LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7361
http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html