CVE-2010-1039

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

• HP Ux

  OS
  Hp
  b.11.11b.11.23b.11.31

• HP Nfs\/oncplus

  APP
  Hp
  ≤ b.11.31_09

• IBM Aix

  OS
  Ibm
  1.2.11.32.2.13.13.23.2.03.2.43.2.544.04.14.1.14.1.24.1.34.1.4+ 22 więcej

• IBM Vios

  APP
  Ibm
  1.42.1≤ 1.5

• Sgi Irix

  OS
  Sgi
  6.5