Both of these programs have numerous security vulnerabilities which can expose the computer to a root compromise by a local user.
Further examination reveals more, and more serious security vulnerabilities in both klock, and kppp.
The general problem is that KDE trusts user supplied environment variables too much. If it finds them, it kills them. A user can place an arbitrary PID in this file, which klock will kill, as root. This flaw has similar ramifications in kppp. When kppp starts up, it attempts to create a set of nested directories to contain logfiles and configuration files.