Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.

CVE-1999-0274: IBM X-Force Exchange

The jj CGI program allows command execution via shell metacharacters.

CVE-1999-0260: IBM X-Force Exchange

The WorkMan program can be used to overwrite any file to get root access.

HP Remote Watch allows a remote user to gain root access.

Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".