CVE-2013-1795

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

CVE-2013-1794

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...

CVE-2013-1795

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

CVE-2013-1794

OpenAFS vulnerability CVE-2013-1794: a buffer overflow in certain client utilities before version 1.6.2 allows remote authenticated users to crash the fileserver or potentially execute code via a long fileserver ACL entry. Several connected advisories cite this CVE and indicate upgrades are neede...

CVE-2013-1794

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...

CVE-2013-1795

OpenAFS (client/server suite) vulnerabilities include CVE-2013-1795: an integer overflow in ptserver before 1.6.2 can be triggered by a large IdToName RPC list, causing a heap-based buffer overflow and remote denial of service (crash). Public advisories consistently refer to OpenAFS before 1.6.2 ...

CVE-2013-1794: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...

CVE-2013-1795: Undefined Security Weakness

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

OpenAFS buffer overflow

Few different buffer overflows...

[SECURITY] [DSA 2638-1] openafs security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2638-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 04, 2013 http://www.debian.org/security/faq -...

Scientific Linux Security Update : openafs on SL5.x SL6.x i386/x86_64 (20130304)

By carefully crafting an ACL entry an attacker may overflow fixed length buffers within the OpenAFS fileserver, crashing the fileserver, and potentially permitting the execution of arbitrary code. To perform the exploit, the attacker must already have permissions to create ACLs on the fileserver ...

Debian DSA-2638-1 : openafs - buffer overflow

Multiple buffer overflows were discovered in OpenAFS, the implementation of the distributed filesystem AFS, which might result in denial of service or the execution of arbitrary code. Further information is available at http://www.openafs.org/security. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 2638-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2638-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 04, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2638-1 (openafs - buffer overflow)

Multiple buffer overflows were discovered in OpenAFS, the implementation of the distributed filesystem AFS, which might result in denial of service or the execution of arbitrary code. Further information is available at http://www.openafs.org/security . OpenVAS Vulnerability Test $Id: deb2638.nas...

DSA-2638-1 openafs - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2638-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

net/openafs -- buffer overflow

Nickolai Zeldovich reports: An attacker with the ability to manipulate AFS directory ACLs may crash the fileserver hosting that volume. In addition, once a corrupt ACL is placed on a fileserver, its existence may crash client utilities manipulating ACLs on that server...

Scientific Linux Security Update : openafs on SL5.0 i386/x86_64

In pthread-aware fileservers, the 'hostglock' pthread lock, accessed via the HLOCK and HUNLOCK macros, is used to provide safe access to host structures. This lock is required to be held when updating information pertaining to a host. The RPC handler for the GiveUpAllCallBacks RPC did not hold th...

Scientific Linux Security Update : openafs on SL5.x i386/x86_64

This release is corresponding with the first kernel security update with the new 2.6.18-92 kernel. We have build new kernel modules for all the kernels we have released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : openafs on SL5.x i386/x86_64

This release is corresponding with the SL 5.5 update. We have build new kernel modules for all the kernels we have released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if description...