Description
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
Exploits (3)
References (9)
Scores
EPSS
0.3457
EPSS Percentile
97.0%
Details
Status
published
Products (16)
conectiva/linux
4.0
conectiva/linux
4.0es
conectiva/linux
4.1
conectiva/linux
4.2
conectiva/linux
5.0
conectiva/linux
5.1
debian/debian_linux
2.2 (4 CPE variants)
debian/debian_linux
2.3 (4 CPE variants)
redhat/linux
6.0 (3 CPE variants)
redhat/linux
6.1 (3 CPE variants)
... and 6 more
Published
Jul 16, 2000
Tracked Since
Feb 18, 2026