Buffer overflow in nlps_server in Sun Solaris x86 2.4 2.5 and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with \NLPS:002:002:\ to the listen (aka System V listener) port TCP port 2766.