Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
phf CGI program allows remote command execution through shell metacharacters.