|
|
| |
|
| |
openafs: multiple vulnerabilities
| Package(s): | openafs |
CVE #(s): | CVE-2009-1250
CVE-2009-1251
|
| Created: | April 13, 2009 |
Updated: | January 17, 2011 |
| Description: |
From the Debian advisory:
An attacker with control of a file server or the ability to forge RX
packets may be able to execute arbitrary code in kernel mode on an
OpenAFS client, due to a vulnerability in XDR array decoding.
(CVE-2009-1251)
An attacker with control of a file server or the ability to forge RX
packets may crash OpenAFS clients because of wrongly handled error
return codes in the kernel module. (CVE-2009-1250).
|
| Alerts: |
|
( Log in to post comments)
|
|
|