A vulnerability has been reported in HP-UX, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

The vulnerability is caused due to a format string error in the "rpc.pcnfsd" service when handling log messages and can be exploited to corrupt memory by sending a specially crafted RPC request to an affected system.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in HP-UX B.11.11, B.11.23, and B.11.31 running NFS/ONCplus versions prior to B.11.31_09.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Provided and/or discovered by
Rodrigo Rubira Branco from the Check Point Vulnerability Discovery Team (VDT).

Changelog
Further details available to Secunia VIM customers

Original Advisory
HPSBUX02523 SSRT100036:
http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02115103

CheckPoint:
http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html

Rodrigo Rubira Branco:
http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0282.html

Deep Links
Links available to Secunia VIM customers