2 results · Clear filters · Feed
-
High 7.7
Preallocated buffer overflows in XDR responses
A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.
-
High 8.4
Theft of credentials in Unix client PAGs
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.