pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
Product
nextstep vulnerabilities
4 published CVES affecting nextstep, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest nextstep CVEs
Newest publication first
-
LowCVSS 1.9 EPSS 0.92%
-
HighCVSS 7.2 EPSS 0.40%
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
-
HighCVSS 10.0 EPSS 51.9% Public exploit
Buffer overflow of rlogin program using TERM environmental variable.
-
HighCVSS 7.2 EPSS 0.99%
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.