CVE Feed

    Dashboard / CVE / CVE-2010-1039

    CVE-2010-1039

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

    Published:May 20, 2010
    Last Modified:Apr 11, 2025
    EPS:May 20, 2010
    EPSS Score:0.2436
    CVSS Score:10

    Affected Products

    Vendor
    Hp
    Product
    Hp-ux
    Vendor
    Hp
    Product
    Nfs\/oncplus
    Vendor
    Ibm
    Product
    Aix
    Vendor
    Ibm
    Product
    Vios
    Vendor
    Sgi
    Product
    Irix

    Exploits

    https://www.exploit-db.com/exploits/14407

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Related CVEs

    CVE-2026-13476 (CVSS 7.3) — IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co…
    CVE-2026-13367 (CVSS 7.8) — IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s…
    CVE-2025-33142 (CVSS 5.3) — IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.…
    CVE-2025-36038 (CVSS 9) — IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the sy…
    CVE-2025-33104 (CVSS 4.4) — IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows …
    CVE-2025-27907 (CVSS 4.1) — IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may all…
    CVE-2024-38320 (CVSS 5.9) — IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Cl…
    CVE-2023-30443 (CVSS 5.3) — IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial…
    CVE-2024-45071 (CVSS 5.5) — IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability …
    CVE-2024-45072 (CVSS 5.5) — IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack wh…

    References

    http://aix.software.ibm.com/aix/efixes/security/pcnfsd_advisory.asc
    http://marc.info/?l=bugtraq&m=127428077629933&w=2
    http://osvdb.org/64729
    http://secunia.com/advisories/39835
    http://secunia.com/advisories/39911
    http://securitytracker.com/id?1024016
    http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73590
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73599
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73681
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73757
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73874
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75369
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75440
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75465
    http://www.securityfocus.com/archive/1/511405/100/0/threaded
    http://www.securityfocus.com/bid/40248
    http://www.securitytracker.com/id?1023994
    http://www.vupen.com/english/advisories/2010/1199
    http://www.vupen.com/english/advisories/2010/1211
    http://www.vupen.com/english/advisories/2010/1212
    http://www.vupen.com/english/advisories/2010/1213
    http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=5088
    https://exchange.xforce.ibmcloud.com/vulnerabilities/58718
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11986
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12103
    http://aix.software.ibm.com/aix/efixes/security/pcnfsd_advisory.asc
    http://marc.info/?l=bugtraq&m=127428077629933&w=2
    http://osvdb.org/64729
    http://secunia.com/advisories/39835
    http://secunia.com/advisories/39911
    http://securitytracker.com/id?1024016
    http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73590
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73599
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73681
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73757
    http://www.ibm.com/support/docview.wss?uid=isg1IZ73874
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75369
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75440
    http://www.ibm.com/support/docview.wss?uid=isg1IZ75465
    http://www.securityfocus.com/archive/1/511405/100/0/threaded
    http://www.securityfocus.com/bid/40248
    http://www.securitytracker.com/id?1023994
    http://www.vupen.com/english/advisories/2010/1199
    http://www.vupen.com/english/advisories/2010/1211
    http://www.vupen.com/english/advisories/2010/1212
    http://www.vupen.com/english/advisories/2010/1213
    http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=5088
    https://exchange.xforce.ibmcloud.com/vulnerabilities/58718
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11986
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12103

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High