AIX 6.1 TL 5 : bos.net.nfs.client (U828006)

This script is Copyright (C) 2010-2013 Tenable Network Security, Inc.


Synopsis :

The remote AIX host is missing a vendor-supplied security patch.

Description :

The remote host is missing AIX PTF U828006, which is related to the
security of the package bos.net.nfs.client.

An integer overflow vulnerability was reported in the rpc.pcnfsd
service within the several systems. The rpc.pcnfsd daemon handles
requests from PC-NFS clients for authentication services on remote
machines. These services include authentication for mounting and for
print spooling. The vulnerability is triggered when parsing crafted
RPC requests. A remote attacker can leverage this vulnerability by
sending a crafted RPC message to the target host, to potentially
inject and execute arbitrary code.

See also :

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ73599

Solution :

Install the appropriate missing security-related fix.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.8
(CVSS2#E:POC/RL:OF/RC:C)
Public Exploit Available : true

Family: AIX Local Security Checks

Nessus Plugin ID: 47648 (aix_U828006.nasl)

Bugtraq ID: 40248

CVE ID: CVE-2010-1039

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now