Signature Detail

RPC: PCNFSD Format string

This signature detects attempts to exploit a known vulnerability in multiple implementations of rpc.pcnfsd. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Multiple vendors' implementation of the rpc.pcnfsd service is prone to an integer overflow vulnerability. Attackers can exploit this issue to gain superuser privileges on the affected computer or to cause denial-of-service conditions. Note: This issue was previously titled 'HP-UX ONCplus Unspecified Remote Privilege Escalation Vulnerability' but has been updated to better document the underlying issue.

Affected Products

• Hp hp-ux B.11.11
• Hp hp-ux B.11.23
• Hp hp-ux B.11.31
• Ibm aix 5.3
• Ibm aix 5.3.0 L
• Ibm aix 5.3.10
• Ibm aix 5.3.7
• Ibm aix 5.3.8
• Ibm aix 5.3.9
• Ibm aix 6.1
• Ibm aix 6.1.1
• Ibm aix 6.1.2
• Ibm aix 6.1.3
• Ibm virtual_i/o_server_(vios) 1.5
• Ibm virtual_i/o_server_(vios) 1.5.2
• Ibm virtual_i/o_server_(vios) 2.1
• Ibm virtual_i/o_server_(vios) 2.1.0
• Sgi irix 6.5.0
• Sgi irix 6.5.0 .19f
• Sgi irix 6.5.0 .19m
• Sgi irix 6.5.0 20

References

• BugTraq: 40248
• CVE: CVE-2010-1039
• URL: http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html
• URL: https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ONCplus
• URL: http://www.hp.com