AIX bugfiler program allows local users to gain root access.

Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument.

Buffer overflow in AIX lquerylv program gives root access to local users.

Buffer overflow in NLS (Natural Language Service).

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.

dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.

AIX Licensed Program Product performance tools allow local users to gain root access.