HP-UX aserver program allows local users to gain privileges via a symlink attack.

Local users can start Sendmail in daemon mode and gain root privileges.

Vacation program allows command execution by remote users through a sendmail command.

Buffer overflow in xlock program allows local users to execute commands as root.

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.