A vulnerability in SCO UnixWare's Merge mcd command allows local attackers to gain elevated privileges by overflowing an internal buffer used by the program.

http://www.securiteam.com/exploits/5XP061PO0Y.html