Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0018. PoCs published by anonymous.
AI-analyzed exploit summary This exploit targets a buffer overflow in the statd RPC NFS status daemon (CVE-1999-0018) on Solaris 2.5.1 x86. It crafts a malicious 'SM_MON' RPC request with shellcode to execute arbitrary commands (default: 'touch /tmp/blahblah') and gain root privileges.
Description
Buffer overflow in statd allows root privileges.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by anonymous · cremotelinux
https://www.exploit-db.com/exploits/19104
This exploit targets a buffer overflow in the statd RPC NFS status daemon (CVE-1999-0018) on Solaris 2.5.1 x86. It crafts a malicious 'SM_MON' RPC request with shellcode to execute arbitrary commands (default: 'touch /tmp/blahblah') and gain root privileges.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
statd (Solaris 2.5.1 x86)
No auth needed
Prerequisites:
Network access to the target's statd service (typically port 111 or a dynamic RPC port) · Target running vulnerable Solaris 2.5.1 x86 with unpatched statd
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Exploit, Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/127
Scores
EPSS
0.1048
EPSS Percentile
95.2%
Details
Status
published
Products (14)
ibm/aix
3.2
ibm/aix
4.1
sgi/irix
5.0
sgi/irix
5.0.1
sgi/irix
5.1
sgi/irix
5.1.1
sgi/irix
5.2
sgi/irix
5.3
sun/solaris
2.4
sun/solaris
2.5
... and 4 more
Published
Dec 05, 1997
Tracked Since
Feb 18, 2026