Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2015-7763

Disclosure Date: November 06, 2015 (last updated October 05, 2023)
rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.
0
0
Attacker Value
Unknown

CVE-2014-0159

Disclosure Date: April 14, 2014 (last updated October 05, 2023)
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
0
0
Attacker Value
Unknown

CVE-2014-2852

Disclosure Date: April 14, 2014 (last updated October 05, 2023)
OpenAFS before 1.6.7 delays the listen thread when an RXS_CheckResponse fails, which allows remote attackers to cause a denial of service (performance degradation) via an invalid packet.
0
0
Attacker Value
Unknown

CVE-2013-4135

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
0
0
Attacker Value
Unknown

CVE-2013-4134

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
0
0