$ cve CVE-2000-0666 JSON

CVE-2000-0666 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 26.3% (pctl 98)

Patch early

A public exploit exists.

Description

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	26.32% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2000-07-16
Last modified	2026-06-16

Affected (5)

Vendor	Product
conectiva	linux
debian	debian linux
redhat	linux
suse	suse linux
trustix	secure linux

Public exploits

Source	Title	Date
exploit-db	Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (3)	2000-08-03
exploit-db	Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (2)	2000-08-01
exploit-db	Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (1)	2000-07-16

References

→ the Explorer · watch your stack · NVD