The SCO's suid root "mscreen" (serial multiscreens utility) has a buffer overflow. When $TERM is copied into a fixed buffer. It's confirmed with 5.0.4 at least.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:13:44 PDT