rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
Affected Platforms
Trustix Secure LinuxDebian Debian LinuxConectiva LinuxRedhat LinuxSuse Suse Linux