Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.

AIX bugfiler program allows local users to gain root access.

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.

Some implementations of rlogin allow root access if given a -froot parameter.

Buffer overflow in AIX dtterm program for the CDE.

RIP v1 is susceptible to spoofing.

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Buffer overflow in ffbconfig in Solaris 2.5.1.

The printers program in IRIX has a buffer overflow that gives root access to local users.

Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.

Finger redirection allows finger bombs.

finger allows recursive searches by using a long string of @ symbols.

A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.

Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Remote access in AIX innd 1.5.1, using control messages.

Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).