CVE-2000-0666

Description

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Affected products

conectiva / linux4.0 – 4.0
conectiva / linux4.0es – 4.0es
conectiva / linux4.1 – 4.1
conectiva / linux4.2 – 4.2
conectiva / linux5.0 – 5.0
conectiva / linux5.1 – 5.1
debian / debian_linux2.2 – 2.2
debian / debian_linux2.2 – 2.2
debian / debian_linux2.2 – 2.2
debian / debian_linux2.2 – 2.2
debian / debian_linux2.3 – 2.3
debian / debian_linux2.3 – 2.3
debian / debian_linux2.3 – 2.3
debian / debian_linux2.3 – 2.3
RedHat / linux6.0 – 6.0
RedHat / linux6.0 – 6.0
RedHat / linux6.0 – 6.0
RedHat / linux6.1 – 6.1
RedHat / linux6.1 – 6.1
RedHat / linux6.1 – 6.1
RedHat / linux6.2 – 6.2
RedHat / linux6.2 – 6.2
RedHat / linux6.2 – 6.2
SUSE / suse_linux6.3 – 6.3
SUSE / suse_linux6.3 – 6.3
SUSE / suse_linux6.3 – 6.3
SUSE / suse_linux6.4 – 6.4
SUSE / suse_linux6.4 – 6.4
SUSE / suse_linux6.4 – 6.4
SUSE / suse_linux7.0 – 7.0
trustix / secure_linux1.0 – 1.0
trustix / secure_linux1.1 – 1.1

Description

Affected products

Exploits & proofs of concept

References