In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.

HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.

Buffer overflow in NetMeeting allows denial of service and remote command execution.

Buffer overflow in Internet Explorer 4.0(1).

Linux bdash game has a buffer overflow that allows local users to gain root access.

SGI mediad program allows local users to gain root access.

SGI permissions program allows local users to gain root privileges.

SGI syserr program allows local users to corrupt files.

Vulnerability in HP-UX mediainit program.

vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.

ppl program in HP-UX allows local users to create root files through symlinks.

FreeBSD mmap function allows users to modify append-only or immutable files.

The open() function in FreeBSD allows local attackers to write to arbitrary files.

Buffer overflow in Solaris kcms_configure command allows local users to gain root access.

SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.

Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.

Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.

Buffer overflow in Linux su command gives root access to local users.

Buffer overflow in Linux splitvt command gives root access to local users.

Buffer overflow in Solaris fdformat command gives root access to local users.