CVE-2010-1039: HP Nfs/oncplus

High severity, CVSS 10.0. EPSS: 20.2% chance of exploitation in the next 30 days.

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

Affected products

• HP Nfs/oncplus: up to and including b.11.31_09
• IBM Aix: up to and including 5.3; version 1.2.1 only; version 1.3 only; version 2.2.1 only; version 3.1 only; version 3.2 only; …
• IBM Vios: up to and including 1.5; version 1.4 only; version 2.1 only
• Sgi Irix: version 6.5 only

Published 2010-05-20. Last modified 2026-06-16.