HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2010-1039

CVSS 10.0v2.0pub. 2010-05-20upd. 2026-04-29

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • HP Ux

    OS
    Hp
    b.11.11b.11.23b.11.31

  • HP Nfs\/oncplus

    APP
    Hp
    ≤ b.11.31_09

  • IBM Aix

    OS
    Ibm
    1.2.11.32.2.13.13.23.2.03.2.43.2.544.04.14.1.14.1.24.1.34.1.4+ 22 more

  • IBM Vios

    APP
    Ibm
    1.42.1≤ 1.5

  • Sgi Irix

    OS
    Sgi
    6.5
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2012-1823CRITICAL9.8⚠ KEVPL ✓same product

RCE w PHP-CGI poprzez wstrzyknięcie opcji wiersza poleceń

CVE-2026-17118CRITICAL9.8same product

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a...

CVE-2026-17040CRITICAL9.8same product

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a...

CVE-2026-16926CRITICAL9.1same product

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due t...

CVE-2026-17122CRITICAL9.8same product

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a...