Remote root exploit for rpc.mountd that makes use of the xlog off-by-one vulnerability discussed here.