Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openafs openafs 1.5.16 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2007-1507
The default configuration in OpenAFS 1.4.x prior to 1.4.4 and 1.5.x prior to 1.5.17 supports setuid programs within the local cell, which might allow malicious users to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root...
Openafs Openafs 1.5.16Openafs Openafs 1.4.2Openafs Openafs 1.5.7Openafs Openafs 1.5.8Openafs Openafs 1.4.3Openafs Openafs 1.4.4Openafs Openafs 1.5.2Openafs Openafs 1.5.3Openafs Openafs 1.5.11Openafs Openafs 1.5.12Openafs Openafs 1.4.0Openafs Openafs 1.4.1Openafs Openafs 1.5.5Openafs Openafs 1.5.6Openafs Openafs 1.5.13Openafs Openafs 1.5.14Openafs Openafs 1.5.15Openafs Openafs 1.5.0Openafs Openafs 1.5.1Openafs Openafs 1.5.9Openafs Openafs 1.5.10
6.5
CVSSv2
CVE-2013-1794
Buffer overflow in certain client utilities in OpenAFS prior to 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Openafs Openafs 1.5.74Openafs Openafs 1.5.73Openafs Openafs 1.5.76Openafs Openafs 1.5.75Openafs Openafs 1.5.68Openafs Openafs 1.5.67Openafs Openafs 1.5.66Openafs Openafs 1.5.65Openafs Openafs 1.5.57Openafs Openafs 1.5.56Openafs Openafs 1.5.39Openafs Openafs 1.5.38Openafs Openafs 1.5.31Openafs Openafs 1.5.30Openafs Openafs 1.5.22Openafs Openafs 1.5.21Openafs Openafs 1.5.14Openafs Openafs 1.5.13Openafs OpenafsOpenafs Openafs 1.6.0Openafs Openafs 1.5.72Openafs Openafs 1.5.71
5
CVSSv2
CVE-2013-1795
Integer overflow in ptserver in OpenAFS prior to 1.6.2 allows remote malicious users to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Openafs Openafs 1.5.76Openafs Openafs 1.5.75Openafs Openafs 1.5.68Openafs Openafs 1.5.67Openafs Openafs 1.5.59Openafs Openafs 1.5.78Openafs Openafs 1.5.77Openafs Openafs 1.5.70Openafs Openafs 1.5.69Openafs Openafs 1.5.61Openafs Openafs 1.5.60Openafs Openafs 1.5.53Openafs Openafs 1.5.52Openafs OpenafsOpenafs Openafs 1.6.0Openafs Openafs 1.5.72Openafs Openafs 1.5.71Openafs Openafs 1.5.64Openafs Openafs 1.5.63Openafs Openafs 1.5.62Openafs Openafs 1.5.55Openafs Openafs 1.5.54
10
CVSSv2
CVE-2009-1251
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 up to and including 1.4.8 and 1.5.0 up to and including 1.5.58 on Unix platforms allows remote malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via an RX res...
Unix UnixOpenafs Openafs 1.0.4aOpenafs Openafs 1.1.1aOpenafs Openafs 1.2.4Openafs Openafs 1.2.11Openafs Openafs 1.2.9Openafs Openafs 1.2.6Openafs Openafs 1.3Openafs Openafs 1.3.1Openafs Openafs 1.4.7Openafs Openafs 1.0.4Openafs Openafs 1.1.1Openafs Openafs 1.1Openafs Openafs 1.2.3Openafs Openafs 1.2.13Openafs Openafs 1.2.7Openafs Openafs 1.3.5Openafs Openafs 1.4.7 Pre2Openafs Openafs 1.4.7 Pre1Openafs Openafs 1.4Openafs Openafs 1.4.5Openafs Openafs 1.5
7.8
CVSSv2
CVE-2009-1250
The cache manager in the client in OpenAFS 1.0 up to and including 1.4.8 and 1.5.0 up to and including 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote malicious users to cause a denial of service (system crash) via an RX response with a large error-code value that...
Openafs Openafs 1.0.1Openafs Openafs 1.0.4aOpenafs Openafs 1.2.1Openafs Openafs 1.2.5Openafs Openafs 1.5Openafs Openafs 1.3.5Openafs Openafs 1.4.3Openafs Openafs 1.4.5Openafs Openafs 1.5.16Openafs Openafs 1.5.33Openafs Openafs 1.5.34Openafs Openafs 1.0Openafs Openafs 1.0.2Openafs Openafs 1.2.2aOpenafs Openafs 1.2.2Openafs Openafs 1.2.6Openafs Openafs 1.2.7Openafs Openafs 1.3Openafs Openafs 1.3.1Openafs Openafs 1.5.31Openafs Openafs 1.5.32Openafs Openafs 1.5.50
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook