CVE-2009-1251

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

Desbordamiento de búfer basado en montículo en el gestor de caché en el cliente OpenAFS v1.0 hasta la v1.4.8 y v1.5.0 hasta la 1.5.58 de las plataformas Unix, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) o posiblemente ejecutar código de su elección a través de una respuesta RX que contenga más datos que los especificados en la petición, relativo al uso de las tablas XDR.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-04-06 CVE Reserved
2009-04-09 CVE Published
2024-04-22 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (11)

URL	Tag	Source
http://secunia.com/advisories/34655	Third Party Advisory
http://secunia.com/advisories/34684	Third Party Advisory
http://secunia.com/advisories/42896	Third Party Advisory
http://www.securityfocus.com/bid/34407	Vdb Entry
http://www.vupen.com/english/advisories/2009/0984	Vdb Entry
http://www.vupen.com/english/advisories/2011/0117	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.openafs.org/security/openafs-sa-2009-001.patch	2011-01-26

URL	Date	SRC
http://security.gentoo.org/glsa/glsa-201101-05.xml	2011-01-26
http://www.debian.org/security/2009/dsa-1768	2011-01-26
http://www.mandriva.com/security/advisories?name=MDVSA-2009:099	2011-01-26
http://www.openafs.org/security/OPENAFS-SA-2009-001.txt	2011-01-26

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0 Search vendor "Openafs" for product "Openafs" and version "1.0"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0.1 Search vendor "Openafs" for product "Openafs" and version "1.0.1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0.2 Search vendor "Openafs" for product "Openafs" and version "1.0.2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0.3 Search vendor "Openafs" for product "Openafs" and version "1.0.3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0.4 Search vendor "Openafs" for product "Openafs" and version "1.0.4"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.0.4a Search vendor "Openafs" for product "Openafs" and version "1.0.4a"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.1 Search vendor "Openafs" for product "Openafs" and version "1.1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.1.0 Search vendor "Openafs" for product "Openafs" and version "1.1.0"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.1.1 Search vendor "Openafs" for product "Openafs" and version "1.1.1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.1.1a Search vendor "Openafs" for product "Openafs" and version "1.1.1a"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2 Search vendor "Openafs" for product "Openafs" and version "1.2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.1 Search vendor "Openafs" for product "Openafs" and version "1.2.1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.2 Search vendor "Openafs" for product "Openafs" and version "1.2.2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.2a Search vendor "Openafs" for product "Openafs" and version "1.2.2a"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.2b Search vendor "Openafs" for product "Openafs" and version "1.2.2b"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.3 Search vendor "Openafs" for product "Openafs" and version "1.2.3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.4 Search vendor "Openafs" for product "Openafs" and version "1.2.4"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.5 Search vendor "Openafs" for product "Openafs" and version "1.2.5"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.6 Search vendor "Openafs" for product "Openafs" and version "1.2.6"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.7 Search vendor "Openafs" for product "Openafs" and version "1.2.7"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.8 Search vendor "Openafs" for product "Openafs" and version "1.2.8"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.9 Search vendor "Openafs" for product "Openafs" and version "1.2.9"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.10 Search vendor "Openafs" for product "Openafs" and version "1.2.10"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.11 Search vendor "Openafs" for product "Openafs" and version "1.2.11"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.2.13 Search vendor "Openafs" for product "Openafs" and version "1.2.13"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3 Search vendor "Openafs" for product "Openafs" and version "1.3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.1 Search vendor "Openafs" for product "Openafs" and version "1.3.1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.2 Search vendor "Openafs" for product "Openafs" and version "1.3.2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.5 Search vendor "Openafs" for product "Openafs" and version "1.3.5"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.70 Search vendor "Openafs" for product "Openafs" and version "1.3.70"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.74 Search vendor "Openafs" for product "Openafs" and version "1.3.74"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.77 Search vendor "Openafs" for product "Openafs" and version "1.3.77"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.3.81 Search vendor "Openafs" for product "Openafs" and version "1.3.81"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4 Search vendor "Openafs" for product "Openafs" and version "1.4"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.0 Search vendor "Openafs" for product "Openafs" and version "1.4.0"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.3 Search vendor "Openafs" for product "Openafs" and version "1.4.3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.4 Search vendor "Openafs" for product "Openafs" and version "1.4.4"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.5 Search vendor "Openafs" for product "Openafs" and version "1.4.5"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.6 Search vendor "Openafs" for product "Openafs" and version "1.4.6"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7 Search vendor "Openafs" for product "Openafs" and version "1.4.7"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7_pre1 Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7_pre2 Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7_pre3 Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7_pre4 Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre4"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.7_pre5 Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre5"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.8 Search vendor "Openafs" for product "Openafs" and version "1.4.8"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.8_pre1 Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre1"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.8_pre2 Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre2"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.4.8_pre3 Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre3"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5 Search vendor "Openafs" for product "Openafs" and version "1.5"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.16 Search vendor "Openafs" for product "Openafs" and version "1.5.16"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.17 Search vendor "Openafs" for product "Openafs" and version "1.5.17"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.26 Search vendor "Openafs" for product "Openafs" and version "1.5.26"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.27 Search vendor "Openafs" for product "Openafs" and version "1.5.27"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.30 Search vendor "Openafs" for product "Openafs" and version "1.5.30"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.31 Search vendor "Openafs" for product "Openafs" and version "1.5.31"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.32 Search vendor "Openafs" for product "Openafs" and version "1.5.32"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.33 Search vendor "Openafs" for product "Openafs" and version "1.5.33"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.34 Search vendor "Openafs" for product "Openafs" and version "1.5.34"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.35 Search vendor "Openafs" for product "Openafs" and version "1.5.35"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.36 Search vendor "Openafs" for product "Openafs" and version "1.5.36"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.38 Search vendor "Openafs" for product "Openafs" and version "1.5.38"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.39 Search vendor "Openafs" for product "Openafs" and version "1.5.39"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.50 Search vendor "Openafs" for product "Openafs" and version "1.5.50"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.52 Search vendor "Openafs" for product "Openafs" and version "1.5.52"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.53 Search vendor "Openafs" for product "Openafs" and version "1.5.53"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.54 Search vendor "Openafs" for product "Openafs" and version "1.5.54"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.55 Search vendor "Openafs" for product "Openafs" and version "1.5.55"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.56 Search vendor "Openafs" for product "Openafs" and version "1.5.56"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.57 Search vendor "Openafs" for product "Openafs" and version "1.5.57"	-	Affected
Unix Search vendor "Unix"	Unix Search vendor "Unix" for product "Unix"	*	-	Affected	in	Openafs Search vendor "Openafs"	Openafs Search vendor "Openafs" for product "Openafs"	1.5.58 Search vendor "Openafs" for product "Openafs" and version "1.5.58"	-	Affected