FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.

Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.

IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.

IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.

sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.

The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.

Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.

WWWBoard has a default username and default password.

WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.

Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.

Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.

UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.

Mutt mail client allows a remote attacker to execute commands via shell metacharacters.

Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.

BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.

BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.