CVE-2000-0666

high · 10

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

CVSS

26.3%

EPSS (exploit prob.)

98th

EPSS percentile

2000-07-16

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
conectiva	linux	4.0
conectiva	linux	4.0es
conectiva	linux	4.1
conectiva	linux	4.2
conectiva	linux	5.0
conectiva	linux	5.1
debian	debian_linux	2.2
debian	debian_linux	2.2
debian	debian_linux	2.2
debian	debian_linux	2.2
debian	debian_linux	2.3
debian	debian_linux	2.3
debian	debian_linux	2.3
debian	debian_linux	2.3
redhat	linux	6.0
redhat	linux	6.0
redhat	linux	6.0
redhat	linux	6.1
redhat	linux	6.1
redhat	linux	6.1
redhat	linux	6.2
redhat	linux	6.2
redhat	linux	6.2
suse	suse_linux	6.3
suse	suse_linux	6.3
suse	suse_linux	6.3
suse	suse_linux	6.4
suse	suse_linux	6.4
suse	suse_linux	6.4
suse	suse_linux	7.0
trustix	secure_linux	1.0
trustix	secure_linux	1.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0666