Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc.
http://www.vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html
http://www.freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files/