sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.

(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.

Denial of service in BIND named via naptr.

Denial of service in AIX ptrace system call allows local users to crash the system.

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.