CVE-2000-0666: Conectiva Linux

High severity, CVSS 10.0. EPSS: 26.3% chance of exploitation in the next 30 days.

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

Affected products

• Conectiva Linux: version 4.0 only; version 4.0es only; version 4.1 only; version 4.2 only; version 5.0 only; version 5.1 only
• Debian Debian Linux: version 2.2 only; version 2.3 only
• Red Hat Linux: version 6.0 only; version 6.1 only; version 6.2 only
• Suse Suse Linux: version 6.3 only; version 6.4 only; version 7.0 only
• Trustix Secure Linux: version 1.0 only; version 1.1 only

Published 2000-07-16. Last modified 2026-06-16.