The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
Denial of service in Linux syslogd via a large number of connections.
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
Denial of service in Debian IRC Epic/epic4 client via a long string.
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
A buffer overflow in lsof allows local users to obtain root privilege.
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
Linux ftpwatch program allows local users to gain root privileges.
Buffer overflow in the bootp server in the Debian Linux netstd package.
Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program …
Buffer overflow in xlock program allows local users to execute commands as root.
Buffer overflow of rlogin program using TERM environmental variable.
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.