mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
| Software | From | Fixed in |
|---|---|---|
| redhat / linux | 6.1 | 6.1.x |
| redhat / linux | 6.2 | 6.2.x |
| netbsd / netbsd | 1.4.2 | 1.4.2.x |
| openbsd / openbsd | 2.7 | 2.7.x |
| openbsd / openbsd | 2.4 | 2.4.x |
| redhat / linux | 6.0 | 6.0.x |
| openbsd / openbsd | 2.6 | 2.6.x |
| netbsd / netbsd | 1.4.1 | 1.4.1.x |
| openbsd / openbsd | 2.5 | 2.5.x |