Read the docs
TI-2010-00998 Aliases CVE-2010-1039GHSA-599v-778r-52j4

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3…

Priority MEDIUM 61CWE-134Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-134 and the CVSS impact.

Summary

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

Why it matters now

EPSS 0.18778 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 45

CPEVersionsRoleVendor
cpe:2.3:a:hp:nfs\/oncplus:*:*:*:*:*:*:*:*up to b.11.31_09VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*b.11.11Running onHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*b.11.23Running onHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*b.11.31Running onHewlett Packard Enterprise
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*up to 5.3VulnerableIBM
cpe:2.3:o:ibm:aix:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableIBM
cpe:2.3:o:ibm:aix:1.3:*:*:*:*:*:*:*1.3VulnerableIBM
cpe:2.3:o:ibm:aix:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableIBM
cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*3.1VulnerableIBM
cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*3.2VulnerableIBM
  • cpe:2.3:a:hp:nfs\/oncplus:*:*:*:*:*:*:*:* Versions up to b.11.31_09 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:* Versions b.11.11 Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:* Versions b.11.23 Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:* Versions b.11.31 Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:* Versions up to 5.3 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·IBM
Show 35 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:ibm:aix:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableIBM
cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableIBM
cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*3.2.5VulnerableIBM
cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*4VulnerableIBM
cpe:2.3:o:ibm:aix:4.0:*:*:*:*:*:*:*4.0VulnerableIBM
cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*4.1VulnerableIBM
cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*4.1.1VulnerableIBM
cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*4.1.2VulnerableIBM
cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*4.1.3VulnerableIBM
cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*4.1.4VulnerableIBM
cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*4.1.5VulnerableIBM
cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*4.2VulnerableIBM
cpe:2.3:o:ibm:aix:4.2.0:*:*:*:*:*:*:*4.2.0VulnerableIBM
cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableIBM
cpe:2.3:o:ibm:aix:4.2.1.12:*:*:*:*:*:*:*4.2.1.12VulnerableIBM
cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*4.3VulnerableIBM
cpe:2.3:o:ibm:aix:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableIBM
cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*4.3.1VulnerableIBM
cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*4.3.2VulnerableIBM
cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*4.3.3VulnerableIBM
cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*5.1VulnerableIBM
cpe:2.3:o:ibm:aix:5.1.0.10:*:*:*:*:*:*:*5.1.0.10VulnerableIBM
cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*5.1lVulnerableIBM
cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*5.2VulnerableIBM
cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*5.2.0VulnerableIBM
cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*5.2.0.50VulnerableIBM
cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*5.2.0.54VulnerableIBM
cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*5.2.2VulnerableIBM
cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*5.2_lVulnerableIBM
cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*6.1VulnerableIBM
cpe:2.3:o:ibm:aix:430:*:*:*:*:*:*:*430VulnerableIBM
cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*up to 1.5VulnerableIBM
cpe:2.3:a:ibm:vios:1.4:*:*:*:*:*:*:*1.4VulnerableIBM
cpe:2.3:a:ibm:vios:2.1:*:*:*:*:*:*:*2.1VulnerableIBM
cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*6.5VulnerableSgi
  • cpe:2.3:o:ibm:aix:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:* Versions 4 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:* Versions 4.1.3 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:* Versions 4.1.5 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.2.1.12:*:*:*:*:*:*:* Versions 4.2.1.12 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.1.0.10:*:*:*:*:*:*:* Versions 5.1.0.10 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:* Versions 5.1l Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:* Versions 5.2.0.50 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:* Versions 5.2.0.54 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:* Versions 5.2.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:* Versions 5.2_l Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:430:*:*:*:*:*:*:* Versions 430 Vulnerable ·IBM
  • cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:* Versions up to 1.5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:vios:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·IBM
  • cpe:2.3:a:ibm:vios:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·IBM
  • cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Sgi

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1039
  2. 2026-10-03 Alias added: GHSA-599v-778r-52j4

References

Advisory 13

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences