Debian Security Advisory DSA 3387-1 (openafs - security update)

John Stumpo discovered that OpenAFS, a distributed file system, does not fully initialize certain network packets before transmitting them. This can lead to a disclosure of the plaintext of previously processed packets. OpenVAS Vulnerability Test $Id: deb3387.nasl 6608 2017-07-07 12:05:05Z cfisch...

Debian DSA-3569-1 : openafs - security update

Two vulnerabilities were discovered in openafs, an implementation of the distributed filesystem AFS. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-8312 Potential denial of service caused by a bug in the pioctl logic allowing a local user to overru...

DEBIAN-CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2007-0454

Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping...

DEBIAN-CVE-2015-6587

The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service out-of-bounds read and crash via a crafted regular expression in a VLListAttributesN2 RPC...

UBUNTU-CVE-2015-3283

OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors...

Scientific Linux Security Update : openafs on SL5.x, SL6.x, SL7.x i386/x86_64 (20150730)

All server platforms Fix for CVE-2015-3282: vos leaks stack data onto the wire in the clear when creating vldb entries Workaround for CVE-2015-3283: bos commands can be spoofed, including some which alter server state Disabled searching the VLDB by volume name regular expression to avoid possible...

Debian Security Advisory DSA 3320-1 (openafs - security update)

It was discovered that OpenAFS, the implementation of the distributed filesystem AFS, contained several flaws that could result in information leak, denial-of-service or kernel panic. OpenVAS Vulnerability Test $Id: deb3320.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DS...

The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information

The vulnerability of the openafs package up to version 1.4.6 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

OpenSSH 2.x/3.x Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4560/info A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require valid user credentials ...

tcpdump 3.4/3.5 AFS ACL Packet Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from the link layer...

DEBIAN-CVE-2013-4135

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

FAA US Academy (AFS) - Auth Bypass Vulnerability

Document Title: =============== FAA US Academy AFS - Auth Bypass Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=171 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 171 Common...

Wireshark: Integer overflow in the AFS dissector

Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service crash via unknown vectors...

openSUSE 10 Security Update : wireshark (wireshark-6444)

Flaws in the AFS dissector allowed attackers to crash wireshark via specially crafted network traffic CVE-2009-2562. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-6444. The text...

SuSE 11 Security Update : ethereal and wireshark (SAT Patch Number 1231)

Flaws in the AFS dissector allowed attackers to crash wireshark via specially crafted network traffic. CVE-2009-2562 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE9 Security Update : ethereal (YOU Patch Number 12485)

Flaws in the AFS dissector allowed attackers to crash ethereal via specially crafted network traffic have been fixed. CVE-2009-2562 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 6443)

Flaws in the AFS dissector allowed attackers to crash ethereal via specially crafted network traffic. CVE-2009-2562 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Wireshark / Ethereal 0.9.2 to 1.0.9 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is affected by multiple issues : - The AFS dissector could crash. Bug 3564 - The infiniband dissector could crash on some platforms. CVE-2009-2563 - The OpcUa dissector could use excessive CPU and memory. Bug 3986 These vulnerabilities could result i...

GLSA-200909-16 : Wireshark: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200909-16 Wireshark: Denial of Service Multiple vulnerabilities were discovered in Wireshark: A buffer overflow in the IPMI dissector related to an array index error CVE-2009-2559. Multiple unspecified vulnerabilities in the...