CVE:CVE-1999-0078
CNNVD:CNNVD-199604-003
rpc.pcnfsd是一个在网络上提供认证和打印服务的RPC守护进程，被运行在大量Unix类操作系统上。
某些版本的rpc.pcnfsd实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在主机上以root用户的权限执行任意命令。
某些版本的rpc.pcnfsd对用户提供的RPC调用参数值未做充分检查，就交给system()调用去执行，远程攻击者可能构造特别的参数值给rpc.pcnfsd守护进程，由于rpc.pcnfsd默认以root用户身份执行，因此攻击者可能以root用户权限远程执行任意命令。
solution:Upgrade ncr mp-ras to a higher version than 2.03,3.0,3.01,and avoid the version 2.03,3.0,3.01; Upgrade sgi irix to a higher version than 5.3,and avoid the version 5.3; Upgrade bsdi bsd_os to a higher version than *; Upgrade freebsd freebsd to a higher version than 6.2:stable,and avoid the version 6.2:stable; Upgrade hp hp-ux to a higher version than *; Upgrade ibm aix to a higher version than 3.2,4.1,4.2,and avoid the version 3.2,4.1,4.2; Upgrade nec up-ux_v to a higher version than *; Upgrade next nextstep to a higher version than *; Upgrade sco openserver to a higher version than 5,and avoid the version 5; Upgrade sco unixware to a higher version than 2.1,and avoid the version 2.1; Upgrade sun sunos to a higher version than 4.1,5.4,5.5,and avoid the version 4.1,5.4,5.5