• info
• discussion
• exploit
• solution
• references

Multiple Linux Vendor rpc.statd Remote Format String Vulnerability

UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

See "rpc.statd remote root xploit for linux/x86 (little fix)" in credits for more information on rpc-statd-xpl.c
statdx2 "the successor of statdx" Linux rpc.statd remote root exploit by ron1n <shellcode@hotmail.com>

• /data/vulnerabilities/exploits/statd-toy.c
• /data/vulnerabilities/exploits/rpc-statd-xpl.c
• /data/vulnerabilities/exploits/statdx.c
• /data/vulnerabilities/exploits/statdx2.tar.gz