This exploit allows remote attackers to execute arbitrary code on vulnerable installations of Sun Solaris. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rpc.ypupdated service. This service is used to update the NIS maps on a system. The service does not properly validate the length of user-supplied data before copying it to a fixed-length stack buffer. An attacker can leverage this vulnerability to execute arbitrary code under the context of root.