Updated openafs packages fix security vulnerabilities

A local user can bypass the OpenAFS PAG Process Authentication Group throttling mechanism in Unix client. CVE-2024-10394 An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash. CVE-2024-10396 A malicious server can crash the OpenAFS cac...

OpenAFS 安全漏洞

OpenAFS is an OpenAFS open source set of distributed file systems. It allows files and resources to be shared between systems over LANs and WANs. A security vulnerability exists in OpenAFS, which stems from the fact that an authenticated user can provide an incorrectly formatted ACL to a file...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...