xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.Referenceshttp://www.securityfocus.com/archive/1/197498
