10

CVE-2010-1039: hp nfs\/oncplus

CVSS: 10.0v2.0HighModified
Published 20-05-2010Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2010-1039 is a high (CVSS 10.0) vulnerability in hp nfs\/oncplus. EPSS estimates a 20.17% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
20.17%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 20-05-2010
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

20.17%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 20.17% on 20-09-2026

20-09-202620-10-2026
EPSS score
20.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databaseremoteaixVerified

    rpc.pcnfsd - Remote Format String

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Ibm2 products
  • aix≤ 5.3 | 1.2.1 | 1.3 | 2.2.1 | 3.1 | 3.2 | 3.2.0 | 3.2.4 | 3.2.5 | 4 | 4.0 | 4.1 | 4.1.1 | 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5 | 4.2 | 4.2.0 | 4.2.1 | 4.2.1.12 | 4.3 | 4.3.0 | 4.3.1 | 4.3.2 | 4.3.3 | 5.1 | 5.1.0.10 | 5.1l | 5.2 | 5.2.0 | 5.2.0.50 | 5.2.0.54 | 5.2.2 | 5.2_l | 6.1
  • vios≤ 1.5 | 1.4 | 2.1
Hp1 product
Sgi1 product

3 vendors · 4 products

References

26 links
Show all 26 references