Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openafs openafs vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2013-1794
Buffer overflow in certain client utilities in OpenAFS prior to 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Openafs Openafs 1.5.74Openafs Openafs 1.5.73Openafs Openafs 1.5.76Openafs Openafs 1.5.75Openafs Openafs 1.5.68Openafs Openafs 1.5.67Openafs Openafs 1.5.66Openafs Openafs 1.5.65Openafs Openafs 1.5.57Openafs Openafs 1.5.56Openafs Openafs 1.5.39Openafs Openafs 1.5.38Openafs Openafs 1.5.31Openafs Openafs 1.5.30Openafs Openafs 1.5.22Openafs Openafs 1.5.21Openafs Openafs 1.5.14Openafs Openafs 1.5.13Openafs OpenafsOpenafs Openafs 1.6.0Openafs Openafs 1.5.72Openafs Openafs 1.5.71
5
CVSSv2
CVE-2013-1795
Integer overflow in ptserver in OpenAFS prior to 1.6.2 allows remote malicious users to cause a denial of service (crash) via a large list from the IdToName RPC, which triggers a heap-based buffer overflow.
Openafs Openafs 1.5.76Openafs Openafs 1.5.75Openafs Openafs 1.5.68Openafs Openafs 1.5.67Openafs Openafs 1.5.59Openafs Openafs 1.5.78Openafs Openafs 1.5.77Openafs Openafs 1.5.70Openafs Openafs 1.5.69Openafs Openafs 1.5.61Openafs Openafs 1.5.60Openafs Openafs 1.5.53Openafs Openafs 1.5.52Openafs OpenafsOpenafs Openafs 1.6.0Openafs Openafs 1.5.72Openafs Openafs 1.5.71Openafs Openafs 1.5.64Openafs Openafs 1.5.63Openafs Openafs 1.5.62Openafs Openafs 1.5.55Openafs Openafs 1.5.54
10
CVSSv2
CVE-2009-1251
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 up to and including 1.4.8 and 1.5.0 up to and including 1.5.58 on Unix platforms allows remote malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via an RX res...
Unix UnixOpenafs Openafs 1.0.4aOpenafs Openafs 1.1.1aOpenafs Openafs 1.2.4Openafs Openafs 1.2.11Openafs Openafs 1.2.9Openafs Openafs 1.2.6Openafs Openafs 1.3Openafs Openafs 1.3.1Openafs Openafs 1.4.7Openafs Openafs 1.0.4Openafs Openafs 1.1.1Openafs Openafs 1.1Openafs Openafs 1.2.3Openafs Openafs 1.2.13Openafs Openafs 1.2.7Openafs Openafs 1.3.5Openafs Openafs 1.4.7 Pre2Openafs Openafs 1.4.7 Pre1Openafs Openafs 1.4Openafs Openafs 1.4.5Openafs Openafs 1.5
4.3
CVSSv2
CVE-2013-4134
OpenAFS prior to 1.4.15, 1.6.x prior to 1.6.5, and 1.7.x prior to 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote malicious users to obtain the service key.
Openafs Openafs 1.7.20Openafs Openafs 1.7.19Openafs Openafs 1.7.18Openafs Openafs 1.7.17Openafs Openafs 1.4.8 Pre3Openafs Openafs 1.4.8 Pre2Openafs Openafs 1.4.8 Pre1Openafs Openafs 1.4.8Openafs Openafs 1.4.7 Pre5Openafs Openafs 1.4.1Openafs Openafs 1.4.0Openafs Openafs 1.4Openafs Openafs 1.3.81Openafs Openafs 1.2.3Openafs Openafs 1.2.2bOpenafs Openafs 1.2.2aOpenafs Openafs 1.2.2Openafs Openafs 1.0.2Openafs Openafs 1.0.1Openafs Openafs 1.0Openafs Openafs 1.6.2.1Openafs Openafs 1.6.2
5
CVSSv2
CVE-2015-7763
rx/rx.c in OpenAFS 1.5.75 up to and including 1.5.78, 1.6.x prior to 1.6.15, and 1.7.x prior to 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote malicious users to obtain sensitive information by (1) conducting a re...
Openafs Openafs 1.6.2Openafs Openafs 1.6.3Openafs Openafs 1.6.7Openafs Openafs 1.6.8Openafs Openafs 1.6.9Openafs Openafs 1.7.10Openafs Openafs 1.7.11Openafs Openafs 1.7.18Openafs Openafs 1.7.19Openafs Openafs 1.7.26Openafs Openafs 1.7.27Openafs Openafs 1.7.8Openafs Openafs 1.5.77Openafs Openafs 1.5.78Openafs Openafs 1.6.6Openafs Openafs 1.6.5.1Openafs Openafs 1.6.12Openafs Openafs 1.6.13Openafs Openafs 1.7.14Openafs Openafs 1.7.15Openafs Openafs 1.7.21Openafs Openafs 1.7.22
7.8
CVSSv2
CVE-2009-1250
The cache manager in the client in OpenAFS 1.0 up to and including 1.4.8 and 1.5.0 up to and including 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote malicious users to cause a denial of service (system crash) via an RX response with a large error-code value that...
Openafs Openafs 1.0.1Openafs Openafs 1.0.4aOpenafs Openafs 1.2.1Openafs Openafs 1.2.5Openafs Openafs 1.5Openafs Openafs 1.3.5Openafs Openafs 1.4.3Openafs Openafs 1.4.5Openafs Openafs 1.5.16Openafs Openafs 1.5.33Openafs Openafs 1.5.34Openafs Openafs 1.0Openafs Openafs 1.0.2Openafs Openafs 1.2.2aOpenafs Openafs 1.2.2Openafs Openafs 1.2.6Openafs Openafs 1.2.7Openafs Openafs 1.3Openafs Openafs 1.3.1Openafs Openafs 1.5.31Openafs Openafs 1.5.32Openafs Openafs 1.5.50
7.5
CVSSv2
CVE-2007-1507
The default configuration in OpenAFS 1.4.x prior to 1.4.4 and 1.5.x prior to 1.5.17 supports setuid programs within the local cell, which might allow malicious users to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root...
Openafs Openafs 1.5.16Openafs Openafs 1.4.2Openafs Openafs 1.5.7Openafs Openafs 1.5.8Openafs Openafs 1.4.3Openafs Openafs 1.4.4Openafs Openafs 1.5.2Openafs Openafs 1.5.3Openafs Openafs 1.5.11Openafs Openafs 1.5.12Openafs Openafs 1.4.0Openafs Openafs 1.4.1Openafs Openafs 1.5.5Openafs Openafs 1.5.6Openafs Openafs 1.5.13Openafs Openafs 1.5.14Openafs Openafs 1.5.15Openafs Openafs 1.5.0Openafs Openafs 1.5.1Openafs Openafs 1.5.9Openafs Openafs 1.5.10
5
CVSSv2
CVE-2015-7762
rx/rx.c in OpenAFS prior to 1.6.15 and 1.7.x prior to 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote malicious users to obtain sensitive information by (1) conducting a replay attack or...
Openafs Openafs 1.7.13Openafs Openafs 1.7.14Openafs Openafs 1.7.20Openafs Openafs 1.7.21Openafs Openafs 1.7.28Openafs Openafs 1.7.29Openafs OpenafsOpenafs Openafs 1.7.1Openafs Openafs 1.7.10Openafs Openafs 1.7.17Openafs Openafs 1.7.19Openafs Openafs 1.7.24Openafs Openafs 1.7.25Openafs Openafs 1.7.4Openafs Openafs 1.7.8Openafs Openafs 1.7.15Openafs Openafs 1.7.16Openafs Openafs 1.7.22Openafs Openafs 1.7.23Openafs Openafs 1.7.3Openafs Openafs 1.7.30Openafs Openafs 1.7.31
5
CVSSv2
CVE-2014-0159
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 prior to 1.6.7 allows remote malicious users to cause a denial of service (crash) via a crafted statsVersion argument.
Openafs Openafs 1.6.2Openafs Openafs 1.6.2.1Openafs Openafs 1.6.3Openafs Openafs 1.6.4Openafs Openafs 1.4.10Openafs Openafs 1.4.11Openafs Openafs 1.4.12Openafs Openafs 1.4.14Openafs Openafs 1.6.1Openafs Openafs 1.6.5Openafs Openafs 1.4.8Openafs Openafs 1.4.15Openafs Openafs 1.6.6Openafs Openafs 1.6.0Openafs Openafs 1.6.5.1Openafs Openafs 1.4.9Openafs Openafs 1.4.14.1Openafs Openafs 1.6.5.2Debian Debian Linux 7.0
5
CVSSv2
CVE-2014-2852
OpenAFS prior to 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote malicious users to cause a denial of service (performance degradation) via an invalid packet.
Openafs Openafs 1.6.5.2Openafs Openafs 1.6.5.1Openafs Openafs 1.6.5Openafs Openafs 1.6.4Openafs Openafs 1.6.0Openafs OpenafsOpenafs Openafs 1.6.3Openafs Openafs 1.6.2Openafs Openafs 1.6.2.1Openafs Openafs 1.6.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook