Send Nasty ICMP Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6211)