The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
HP-UX aserver program allows local users to gain privileges via a symlink attack.
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Land IP denial of service.
Teardrop IP denial of service.