SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
Buffer overflow of rlogin program using TERM environmental variable.