ppp could be made to load arbitrary kernel modules and possibly run programs.