Some configurations of NIS+ in Linux allowed malicious users to log in as the user "+".
linux linux kernel 2.6.20.1