These bugs date back to 2009, and they could give crooks who are already in your network access to sysadmin superpowers.