Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

'An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.'.

The remote host is missing AIX PTF U830280, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U828006, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U834157, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U834083, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U833953, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

s700_800 11.11 ONC/NFS General Release/Performance Patch : 

A potential security vulnerability has been identified with the NFS/ONCplus rpc.pcnfsd component running on HP-UX. The vulnerability could result in a remote Denial of Service (DoS) and increase in privilege.

s700_800 11.23 NFS cumulative patch : 

A potential security vulnerability has been identified with the NFS/ONCplus rpc.pcnfsd component running on HP-UX. The vulnerability could result in a remote Denial of Service (DoS) and increase in privilege.

The remote host is missing AIX PTF U832864, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U832850, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

The remote host is missing AIX PTF U830259, which is related to the security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. The vulnerability is triggered when parsing crafted RPC requests. A remote attacker can leverage this vulnerability by sending a crafted RPC message to the target host, to potentially inject and execute arbitrary code.

ID	Name	Product	Family	Severity
63821	AIX 6.1 TL 2 : pcnfsd (IZ75465)	Nessus	AIX Local Security Checks	critical
63820	AIX 6.1 TL 3 : pcnfsd (IZ75440)	Nessus	AIX Local Security Checks	critical
63819	AIX 6.1 TL 4 : pcnfsd (IZ75369)	Nessus	AIX Local Security Checks	critical
63818	AIX 5.3 TL 9 : pcnfsd (IZ73874)	Nessus	AIX Local Security Checks	critical
63817	AIX 5.3 TL 10 : pcnfsd (IZ73757)	Nessus	AIX Local Security Checks	critical
63816	AIX 5.3 TL 11 : pcnfsd (IZ73681)	Nessus	AIX Local Security Checks	critical
63815	AIX 6.1 TL 5 : pcnfsd (IZ73599)	Nessus	AIX Local Security Checks	critical
63814	AIX 5.3 TL 12 : pcnfsd (IZ73590)	Nessus	AIX Local Security Checks	critical
47657	AIX 5.3 TL 12 : bos.net.nfs.client (U830280)	Nessus	AIX Local Security Checks	critical
47648	AIX 6.1 TL 5 : bos.net.nfs.client (U828006)	Nessus	AIX Local Security Checks	critical
46964	AIX 6.1 TL 3 : bos.net.nfs.client (U834157)	Nessus	AIX Local Security Checks	critical
46955	AIX 6.1 TL 2 : bos.net.nfs.client (U834083)	Nessus	AIX Local Security Checks	critical
46924	AIX 6.1 TL 4 : bos.net.nfs.client (U833953)	Nessus	AIX Local Security Checks	critical
46698	HP-UX PHNE_41023 : HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege (HPSBUX02523 SSRT100036 rev.2)	Nessus	HP-UX Local Security Checks	critical
46697	HP-UX PHNE_41021 : HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege (HPSBUX02523 SSRT100036 rev.2)	Nessus	HP-UX Local Security Checks	critical
46580	AIX 5.3 TL 10 : bos.net.nfs.client (U832864)	Nessus	AIX Local Security Checks	critical
46566	AIX 5.3 TL 11 : bos.net.nfs.client (U832850)	Nessus	AIX Local Security Checks	critical
46406	AIX 5.3 TL 9 : bos.net.nfs.client (U830259)	Nessus	AIX Local Security Checks	critical

Detections

Analytics

CVE-2010-1039

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical