CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via an RX response containing more data than specified in a...

CVE-2009-1251

OpenAFS vulnerability CVE-2009-1251 affects the OpenAFS client cache manager on Unix. The issue is a heap-based bug related to XDR arrays (and ERR_PTR usage) in the cache manager, allowing remote attackers to crash the kernel and potentially execute arbitrary code or cause a denial of service. Af...

Mandriva Update for openafs MDVA-2008:006 (openafs)

Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDVA-2008:006 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for openafs MDKSA-2007:066 (openafs)

Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDKSA-2007:066 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-1250

OpenAFS vulnerability CVE-2009-1250 affects the Linux client cache manager in OpenAFS versions 1.0–1.4.8 and 1.5.0–1.5.58 (also IBM AFS 3.6 before Patch 19). The issue arises when processing an RX response with a large error-code value that is interpreted as a pointer and dereferenced, potentiall...

Gentoo Security Advisory GLSA 200704-03 (openafs)

The remote host is missing updates announced in advisory GLSA 200704-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200801-04 (openafs)

The remote host is missing updates announced in advisory GLSA 200801-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-03 (openafs)

The remote host is missing updates announced in advisory GLSA 200704-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-04 (openafs)

The remote host is missing updates announced in advisory GLSA 200801-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1458-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1458-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 1458-1. OpenVAS Vulnerability Test $Id: deb14581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1458-1 openafs Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 142-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 142-1. OpenVAS Vulnerability Test $Id: deb1421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 142-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1271-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 1271-1. A design error has been identified in the OpenAFS, a cross-platform distributed filesystem included with Debian. OpenAFS historically has enabled setuid filesystem support for the local cell. However, with its...

Debian: Security Advisory (DSA-1271-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-142)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1458-1 : openafs - programming error

A race condition in the OpenAFS fileserver allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the hostglock lock...

openSUSE 10 Security Update : openafs (openafs-4887)

This update fixes a remote denial of service crash against the openafs server. CVE-2007-6599 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openafs-4887. The text description of this plugin i...

[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...

OpenAFS race conditions

Race conditions on acquiring and giving back file callbacks...

[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...