© 2026 vulntracker.io

CVE-2010-1039

N/A

Published: May 20, 2010 at 05:00 PM UTC

Updated: June 16, 2026 at 11:17 PM UTC

5 products affected across 3 vendorsAIXVIOSIrix

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 20%

Description

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

NFS /oncplus · HP

95%

v ≤ b.11.31_09

hp-hp-ux (environment)

95%

v ≤ 5.31.2.1 1.3 2.2.1 3.1 3.2 3.2.0 3.2.4 3.2.5 4 4.0 4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 4.2 4.2.0 4.2.1 4.2.1.12 4.3 4.3.0 4.3.1 4.3.2 4.3.3 430 5.1 5.1.0.10 5.1l 5.2 5.2.0 5.2.0.50 5.2.0.54 5.2.2 5.2_l 6.1

95%

v ≤ 1.51.4 2.1

95%

HP Ux · HPdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (26)

x_refsource_CONFIRM

Source: [email protected]

http://aix.software.ibm.com/aix/efixes/security/pcnfsd_advisory.asc

Vendor Advisoryx_refsource_HP

Source: [email protected]

http://marc.info/?l=bugtraq&m=127428077629933&w=2

VDB Entryx_refsource_OSVDB

Source: [email protected]

http://osvdb.org/64729

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/39835

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/39911

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://securitytracker.com/id?1024016

x_refsource_MISC

Source: [email protected]

http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html

Vendor Advisoryx_refsource_AIXAPAR

Source: [email protected]

http://www.ibm.com/support/docview.wss?uid=isg1IZ73590

CVSS

10HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-134

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card