The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.

Buffer overflow in AIX writesrv command allows local users to obtain root access.

Buffer overflow in AIX xdat gives root access to local users.

Buffer overflow in AIX lchangelv gives root access.

Buffer overflow in AIX lquerylv program gives root access to local users.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.