CVE-1999-0078: Bsdi Bsd OS

Low severity, CVSS 1.9. EPSS: 0.9% chance of exploitation in the next 30 days.

pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.

Affected products

• Bsdi Bsd OS: any version
• Freebsd Freebsd: version 6.2 only
• HP HP-Ux: any version
• IBM Aix: version 3.2 only; version 4.1 only; version 4.2 only
• Ncr Mp-Ras: version 2.03 only; version 3.0 only; version 3.01 only
• Nec Up-Ux V: any version
• Next Nextstep: any version
• Sco Openserver: version 5 only
• Sco Unixware: version 2.1 only
• Sgi Irix: version 5.3 only
• Sun Sunos: version 4.1 only; version 5.4 only; version 5.5 only

Published 1996-04-18. Last modified 2026-06-16.