// For flags

CVE-2009-1251

Gentoo Linux Security Advisory 201404-05

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

Desbordamiento de búfer basado en montículo en el gestor de caché en el cliente OpenAFS v1.0 hasta la v1.4.8 y v1.5.0 hasta la 1.5.58 de las plataformas Unix, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) o posiblemente ejecutar código de su elección a través de una respuesta RX que contenga más datos que los especificados en la petición, relativo al uso de las tablas XDR.

Multiple vulnerabilities have been found in OpenAFS, worst of which can allow attackers to execute arbitrary code. Versions less than 1.6.5 are affected.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-04-06 CVE Reserved
  • 2009-04-09 CVE Published
  • 2024-04-22 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0
Search vendor "Openafs" for product "Openafs" and version "1.0"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0.1
Search vendor "Openafs" for product "Openafs" and version "1.0.1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0.2
Search vendor "Openafs" for product "Openafs" and version "1.0.2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0.3
Search vendor "Openafs" for product "Openafs" and version "1.0.3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0.4
Search vendor "Openafs" for product "Openafs" and version "1.0.4"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.0.4a
Search vendor "Openafs" for product "Openafs" and version "1.0.4a"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.1
Search vendor "Openafs" for product "Openafs" and version "1.1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.1.0
Search vendor "Openafs" for product "Openafs" and version "1.1.0"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.1.1
Search vendor "Openafs" for product "Openafs" and version "1.1.1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.1.1a
Search vendor "Openafs" for product "Openafs" and version "1.1.1a"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2
Search vendor "Openafs" for product "Openafs" and version "1.2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.1
Search vendor "Openafs" for product "Openafs" and version "1.2.1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.2
Search vendor "Openafs" for product "Openafs" and version "1.2.2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.2a
Search vendor "Openafs" for product "Openafs" and version "1.2.2a"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.2b
Search vendor "Openafs" for product "Openafs" and version "1.2.2b"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.3
Search vendor "Openafs" for product "Openafs" and version "1.2.3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.4
Search vendor "Openafs" for product "Openafs" and version "1.2.4"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.5
Search vendor "Openafs" for product "Openafs" and version "1.2.5"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.6
Search vendor "Openafs" for product "Openafs" and version "1.2.6"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.7
Search vendor "Openafs" for product "Openafs" and version "1.2.7"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.8
Search vendor "Openafs" for product "Openafs" and version "1.2.8"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.9
Search vendor "Openafs" for product "Openafs" and version "1.2.9"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.10
Search vendor "Openafs" for product "Openafs" and version "1.2.10"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.11
Search vendor "Openafs" for product "Openafs" and version "1.2.11"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.2.13
Search vendor "Openafs" for product "Openafs" and version "1.2.13"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3
Search vendor "Openafs" for product "Openafs" and version "1.3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.1
Search vendor "Openafs" for product "Openafs" and version "1.3.1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.2
Search vendor "Openafs" for product "Openafs" and version "1.3.2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.5
Search vendor "Openafs" for product "Openafs" and version "1.3.5"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.70
Search vendor "Openafs" for product "Openafs" and version "1.3.70"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.74
Search vendor "Openafs" for product "Openafs" and version "1.3.74"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.77
Search vendor "Openafs" for product "Openafs" and version "1.3.77"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.3.81
Search vendor "Openafs" for product "Openafs" and version "1.3.81"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4
Search vendor "Openafs" for product "Openafs" and version "1.4"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.0
Search vendor "Openafs" for product "Openafs" and version "1.4.0"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.3
Search vendor "Openafs" for product "Openafs" and version "1.4.3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.4
Search vendor "Openafs" for product "Openafs" and version "1.4.4"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.5
Search vendor "Openafs" for product "Openafs" and version "1.4.5"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.6
Search vendor "Openafs" for product "Openafs" and version "1.4.6"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7
Search vendor "Openafs" for product "Openafs" and version "1.4.7"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7_pre1
Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7_pre2
Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7_pre3
Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7_pre4
Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre4"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.7_pre5
Search vendor "Openafs" for product "Openafs" and version "1.4.7_pre5"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.8
Search vendor "Openafs" for product "Openafs" and version "1.4.8"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.8_pre1
Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre1"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.8_pre2
Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre2"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.4.8_pre3
Search vendor "Openafs" for product "Openafs" and version "1.4.8_pre3"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5
Search vendor "Openafs" for product "Openafs" and version "1.5"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.16
Search vendor "Openafs" for product "Openafs" and version "1.5.16"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.17
Search vendor "Openafs" for product "Openafs" and version "1.5.17"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.26
Search vendor "Openafs" for product "Openafs" and version "1.5.26"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.27
Search vendor "Openafs" for product "Openafs" and version "1.5.27"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.30
Search vendor "Openafs" for product "Openafs" and version "1.5.30"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.31
Search vendor "Openafs" for product "Openafs" and version "1.5.31"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.32
Search vendor "Openafs" for product "Openafs" and version "1.5.32"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.33
Search vendor "Openafs" for product "Openafs" and version "1.5.33"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.34
Search vendor "Openafs" for product "Openafs" and version "1.5.34"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.35
Search vendor "Openafs" for product "Openafs" and version "1.5.35"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.36
Search vendor "Openafs" for product "Openafs" and version "1.5.36"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.38
Search vendor "Openafs" for product "Openafs" and version "1.5.38"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.39
Search vendor "Openafs" for product "Openafs" and version "1.5.39"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.50
Search vendor "Openafs" for product "Openafs" and version "1.5.50"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.52
Search vendor "Openafs" for product "Openafs" and version "1.5.52"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.53
Search vendor "Openafs" for product "Openafs" and version "1.5.53"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.54
Search vendor "Openafs" for product "Openafs" and version "1.5.54"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.55
Search vendor "Openafs" for product "Openafs" and version "1.5.55"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.56
Search vendor "Openafs" for product "Openafs" and version "1.5.56"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.57
Search vendor "Openafs" for product "Openafs" and version "1.5.57"
-
Affected
Unix
Search vendor "Unix"
Unix
Search vendor "Unix" for product "Unix"
*-
Affected
in Openafs
Search vendor "Openafs"
Openafs
Search vendor "Openafs" for product "Openafs"
1.5.58
Search vendor "Openafs" for product "Openafs" and version "1.5.58"
-
Affected