critical10.0Public exploit code
CVE-2000-0666
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain roo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (3)2000-08-03 · remote · linux · Verified
- Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (2)2000-08-01 · remote · linux · Verified
- Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (1)2000-07-16 · remote · linux · Verified
Impact
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Conectiva | Linux | Versions 4.0, 4.0es, 4.1, 4.2, 5.0, 5.1 |
| Debian | Debian Linux | Versions 2.2, 2.3 |
| Redhat | Linux | Versions 6.0, 6.1, 6.2 |
| Suse | Suse Linux | Versions 6.3, 6.4, 7.0 |
| Trustix | Secure Linux | Versions 1.0, 1.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0260.html
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-025.0.txt
- http://www.cert.org/advisories/CA-2000-17.html
- http://www.redhat.com/support/errata/RHSA-2000-043.html
- http://www.securityfocus.com/bid/1480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4939
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0260.html
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-025.0.txt
- http://www.cert.org/advisories/CA-2000-17.html
- http://www.redhat.com/support/errata/RHSA-2000-043.html
- http://www.securityfocus.com/bid/1480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4939