Denial of service in BIND named via malformed SIG records.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
Denial of service in BIND named via naptr.
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.