HP Nfs/oncplus vulnerabilities

2 CVEs affecting HP Nfs/oncplus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0896, published 2011-04-15.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-1039, published 2010-05-20. High severity, CVSS 10.0. EPSS: 20.2% chance of exploitation in the next 30 days. Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23,…
• CVE-2011-0896, published 2011-04-15. Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors.