Vulnerabilities > Openafs > Openafs > 1.5.58

DATE CVE VULNERABILITY TITLE RISK
2013-03-14 CVE-2013-1794 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openafs
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
network
low complexity
openafs CWE-119
6.5
2009-04-09 CVE-2009-1251 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.
network
low complexity
unix openafs CWE-119
critical
10.0
2009-04-09 CVE-2009-1250 Numeric Errors vulnerability in multiple products
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
network
low complexity
ibm openafs linux CWE-189
7.8