CVEvulnerability

CVE-2000-0666

10.0 HIGH Published 2000-07-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-07-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Affected configurations

• conectiva linux 4.0 • conectiva linux 4.0es • conectiva linux 4.1 • conectiva linux 4.2 • conectiva linux 5.0 • conectiva linux 5.1 • debian debian linux 2.2 • debian debian linux 2.3 • redhat linux 6.0 • redhat linux 6.1 • redhat linux 6.2 • suse suse linux 6.3 • suse suse linux 6.4 • suse suse linux 7.0 • trustix secure linux 1.0 • trustix secure linux 1.1

References