You do need shell access for a user that has sudo’d before, but still, easy way to get root.

http://arstechnica.com/security/2013/08/unpatched-mac-bug-gives-attackers-super-user-status-by-going-back-in-time/