peter bassill · operator
$ cve CVE-2010-1039 JSON

CVE-2010-1039 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 20.2% (pctl 97)

Patch early

A public exploit exists.

Description

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS20.17% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-134
On CISA KEVno
Public exploityes
Published2010-05-20
Last modified2026-06-16

Affected (5)

VendorProduct
hphp-ux
hpnfs\/oncplus
ibmaix
ibmvios
sgiirix

Public exploits

SourceTitleDate
exploit-dbrpc.pcnfsd - Remote Format String2010-07-18

References

→ the Explorer  ·  watch your stack  ·  NVD