http://www.cert.org/advisories/CA-2002-34.html CERT reports that computers running all recent versions of Solaris can be commandeered from across the Internet via a bug in the X Window Font Service (XFS).