system() call in suid programs

[czetts () rpi edu (Not Joe)]

Hello,

I know that it is bad to use the system() system call in programs, especially
ones that are suid root, and that it can be exploited fairly easily.  Could
somebody post or send me details how exploits based on the system() call work?
Detail would be good, as I am supposed to explain the security implications
to my boss at our next meeting.

Thanks in advance.

-Steve