Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].

wu-ftp allows files to be overwritten via the rnfr command.

Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.

Csetup under IRIX allows arbitrary file creation or overwriting.

Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.

Remote access in AIX innd 1.5.1, using control messages.

In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

NFS allows users to use a "cd .." command to access other directories besides the exported file system.

Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.

Denial of service in syslog by sending it a large number of superfluous messages.

FormMail CGI program can be used by web servers other than the host server that the program resides on.

Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.

Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.