Lucene search
RedhatCVE-2013-1794HistoryMar 14, 2013 - 3:13 a.m.
CVE-2013-1794
2013-03-1403:13:37
CWE-119
redhat
web.nvd.nist.gov
41
cve-2013-1794
buffer overflow
openafs
denial of service
remote authentication
arbitrary code execution
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.049
Percentile
92.8%
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long fileserver ACL entry.
Affected configurations
Node
openafsopenafsRange≤1.6.1
ORopenafsopenafsMatch1.5.10
ORopenafsopenafsMatch1.5.11
ORopenafsopenafsMatch1.5.12
ORopenafsopenafsMatch1.5.13
ORopenafsopenafsMatch1.5.14
ORopenafsopenafsMatch1.5.15
ORopenafsopenafsMatch1.5.16
ORopenafsopenafsMatch1.5.17
ORopenafsopenafsMatch1.5.18
ORopenafsopenafsMatch1.5.19
ORopenafsopenafsMatch1.5.20
ORopenafsopenafsMatch1.5.21
ORopenafsopenafsMatch1.5.22
ORopenafsopenafsMatch1.5.23
ORopenafsopenafsMatch1.5.24
ORopenafsopenafsMatch1.5.25
ORopenafsopenafsMatch1.5.26
ORopenafsopenafsMatch1.5.27
ORopenafsopenafsMatch1.5.28
ORopenafsopenafsMatch1.5.29
ORopenafsopenafsMatch1.5.30
ORopenafsopenafsMatch1.5.31
ORopenafsopenafsMatch1.5.32
ORopenafsopenafsMatch1.5.33
ORopenafsopenafsMatch1.5.34
ORopenafsopenafsMatch1.5.35
ORopenafsopenafsMatch1.5.36
ORopenafsopenafsMatch1.5.37
ORopenafsopenafsMatch1.5.38
ORopenafsopenafsMatch1.5.39
ORopenafsopenafsMatch1.5.50
ORopenafsopenafsMatch1.5.51
ORopenafsopenafsMatch1.5.52
ORopenafsopenafsMatch1.5.53
ORopenafsopenafsMatch1.5.54
ORopenafsopenafsMatch1.5.55
ORopenafsopenafsMatch1.5.56
ORopenafsopenafsMatch1.5.57
ORopenafsopenafsMatch1.5.58
ORopenafsopenafsMatch1.5.59
ORopenafsopenafsMatch1.5.60
ORopenafsopenafsMatch1.5.61
ORopenafsopenafsMatch1.5.62
ORopenafsopenafsMatch1.5.63
ORopenafsopenafsMatch1.5.64
ORopenafsopenafsMatch1.5.65
ORopenafsopenafsMatch1.5.66
ORopenafsopenafsMatch1.5.67
ORopenafsopenafsMatch1.5.68
ORopenafsopenafsMatch1.5.69
ORopenafsopenafsMatch1.5.70
ORopenafsopenafsMatch1.5.71
ORopenafsopenafsMatch1.5.72
ORopenafsopenafsMatch1.5.73
ORopenafsopenafsMatch1.5.74
ORopenafsopenafsMatch1.5.75
ORopenafsopenafsMatch1.5.76
ORopenafsopenafsMatch1.5.77
ORopenafsopenafsMatch1.5.78
ORopenafsopenafsMatch1.6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openafs | openafs | * | cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.10 | cpe:2.3:a:openafs:openafs:1.5.10:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.11 | cpe:2.3:a:openafs:openafs:1.5.11:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.12 | cpe:2.3:a:openafs:openafs:1.5.12:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.13 | cpe:2.3:a:openafs:openafs:1.5.13:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.14 | cpe:2.3:a:openafs:openafs:1.5.14:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.15 | cpe:2.3:a:openafs:openafs:1.5.15:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.16 | cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.17 | cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:* |
| openafs | openafs | 1.5.18 | cpe:2.3:a:openafs:openafs:1.5.18:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-1794
2013-03-14 00:00:00
nessus
nessus
Debian DSA-2638-1 : openafs - buffer overflow
2013-03-05 00:00:00
debiancve
debiancve
CVE-2013-1794
2013-03-14 03:13:37
freebsd
freebsd
net/openafs -- buffer overflow
2013-02-27 00:00:00
nvd
nvd
CVE-2013-1794
2013-03-14 03:13:37
cvelist
cvelist
CVE-2013-1794
2013-03-12 16:00:00
prion
prion
Buffer overflow
2013-03-14 03:13:00
securityvulns
securityvulns
OpenAFS buffer overflow
2013-03-11 00:00:00
[SECURITY] [DSA 2638-1] openafs security update
2013-03-11 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2638-1)
2013-03-03 00:00:00
Debian Security Advisory DSA 2638-1 (openafs - buffer overflow)
2013-03-04 00:00:00
Gentoo Security Advisory GLSA 201404-05
2015-09-29 00:00:00
osv
osv
openafs - buffer overflow
2013-03-04 00:00:00
debian
debian
[SECURITY] [DSA 2638-1] openafs security update
2013-03-04 22:30:08
gentoo
gentoo
OpenAFS: Multiple vulnerabilities
2014-04-07 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.049
Percentile
92.8%
Related for CVE-2013-1794