7350lapsus is a lpr-3.0.48 Local root exploit. Requires root on a host counted in hosts.lpd and local account on lpd box. This is proof of concept, chown()ing /etc/passwd to a user named 'stealth'.
008fb511165627efdecec5b56039891877cb8c6295921fcc905fddc5f9d0f05c