NetSight
critical10.0Public exploit code

CVE-2000-0666

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain roo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Affected products

VendorProductAffected versions
ConectivaLinux
Versions 4.0, 4.0es, 4.1, 4.2, 5.0, 5.1
DebianDebian Linux
Versions 2.2, 2.3
RedhatLinux
Versions 6.0, 6.1, 6.2
SuseSuse Linux
Versions 6.3, 6.4, 7.0
TrustixSecure Linux
Versions 1.0, 1.1

References