CVE-2009-1250

Related Files

Gentoo Linux Security Advisory 201404-05

Posted Apr 7, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201404-5 - Multiple vulnerabilities have been found in OpenAFS, worst of which can allow attackers to execute arbitrary code. Versions less than 1.6.5 are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2009-1250, CVE-2009-1251, CVE-2011-0430, CVE-2011-0431, CVE-2013-1794, CVE-2013-1795, CVE-2013-4134, CVE-2013-4135

SHA-256 | bdd4ed6538ff78bf057d8dfb17d273d308bbeb4af917a10d1c972e171f1ca870

Download | Favorite | View

Gentoo Linux Security Advisory 201101-05

Posted Jan 16, 2011

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201101-5 - The cache manager of OpenAFS contains several bugs resulting in remote execution of arbitrary code. Versions less than 1.4.9 are affected.

tags | advisory, remote, arbitrary

systems | linux, gentoo

advisories | CVE-2009-1250, CVE-2009-1251

SHA-256 | 9d87a7f902252e76bacdfa5d0e92da4a8229407644d9ad6441121493e1f5af12

Download | Favorite | View

Mandriva Linux Security Advisory 2009-099

Posted Dec 8, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-099 - The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. The updated packages have been patched to correct these issues. Packages for 2008.0 are being provided due to extended support for Corporate products.

tags | advisory, remote, denial of service, overflow, arbitrary

systems | linux, unix, mandriva

advisories | CVE-2009-1250, CVE-2009-1251

SHA-256 | c30548b7bc0fa8ba870b95cdc42b8eff41200e88943fe0c170401ff661cf3e77

Download | Favorite | View

Mandriva Linux Security Advisory 2009-099

Posted Apr 28, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-099 - The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. The updated packages have been patched to correct these issues.

tags | advisory, remote, denial of service, overflow, arbitrary

systems | linux, unix, mandriva

advisories | CVE-2009-1250, CVE-2009-1251

SHA-256 | 2e569807acb2c17926c793d01b802bde70b62b12ff6fcf105af9193ac070266b

Download | Favorite | View

Debian Linux Security Advisory 1768-1

Posted Apr 10, 2009

Authored by Debian | Site debian.org

Debian Security Advisory 1768-1 - Two vulnerabilities were discovered in the client part of OpenAFS, a distributed file system.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2009-1250, CVE-2009-1251

SHA-256 | ec6d39f64def46cde362948947c87b5b86ebdf51b0a8e50eb3f144440cf13645

Download | Favorite | View