Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家厂商rpc.pcnfsd远程可执行任意命令漏洞
Vulnerability Description
rpc.pcnfsd是一个在网络上提供认证和打印服务的RPC守护进程，被运行在大量Unix类操作系统上。 某些版本的rpc.pcnfsd实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在主机上以root用户的权限执行任意命令。 某些版本的rpc.pcnfsd对用户提供的RPC调用参数值未做充分检查，就交给system()调用去执行，远程攻击者可能构造特别的参数值给rpc.pcnfsd守护进程，由于rpc.pcnfsd默认以root用户身份执行，因此攻击者可能以root用户权限远程执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A