lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.

Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.

SGI mediad program allows local users to gain root access.

The printers program in IRIX has a buffer overflow that gives root access to local users.

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

Buffer overflow in SGI IRIX mailx program.

Buffer overflow in statd allows root privileges.

SGI permissions program allows local users to gain root privileges.

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

root privileges via buffer overflow in df command on SGI IRIX systems.

root privileges via buffer overflow in pset command on SGI IRIX systems.

root privileges via buffer overflow in eject command on SGI IRIX systems.

root privileges via buffer overflow in login/scheme command on SGI IRIX systems.

root privileges via buffer overflow in ordist command on SGI IRIX systems.

root privileges via buffer overflow in xlock command on SGI IRIX systems.

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.

Command execution in Sun systems via buffer overflow in the at program.