CVE Vulnerabilities

CVE-2000-0666

Published: Jul 16, 2000 | Modified: May 03, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Affected Software

Name Vendor Start Version End Version
Linux Conectiva 4.0 4.0
Linux Conectiva 4.0es 4.0es
Linux Conectiva 4.1 4.1
Linux Conectiva 4.2 4.2
Linux Conectiva 5.0 5.0
Linux Conectiva 5.1 5.1

References