Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.

Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.

A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.

A buffer overflow in lsof allows local users to obtain root privilege.

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

Buffer overflow in Dosemu Slang library in Linux.

Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.