Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.
https://www.exploit-db.com/exploits/5357
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6522