libpam-smb contains a buffer overflow that can be used to execute arbitrary commands with root privilege.