CVE-2000-0666
Linux rpc.statd - Remote Code Execution via Format String Vulnerability
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2000-0666. PoCs published by ron1n, Doing, drow.
AI-analyzed exploit summary This exploit targets a format string vulnerability in rpc.statd (part of nfs-utils) to achieve remote code execution as root. It leverages a crafted format string to overwrite memory addresses and execute shellcode, binding a shell to port 39168.
Description
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
Exploits (3)
This exploit targets a format string vulnerability in rpc.statd (part of nfs-utils) to achieve remote code execution as root. It leverages a crafted format string to overwrite memory addresses and execute shellcode, binding a shell to port 39168.
This exploit targets a format string vulnerability in rpc.statd (part of nfs-utils) to achieve remote code execution as root. It crafts a malicious payload using format specifiers to overwrite memory and execute arbitrary shellcode.
This exploit targets a format string vulnerability in rpc.statd (part of nfs-utils) to achieve remote code execution as root. It constructs a malicious format string to overwrite memory addresses and inject shellcode via RPC calls.