Solaris remote root exploit

Read on: OpenSolaris remote root exploit

No, it’s even not a joke :)

Just as good as the telnet -l -froot vulnerability, also available on AIX.