PT-2008-1009 · Openafs · Openafs

Published 2008-01-04 · Updated 2018-10-26 · CVE-2007-6599

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.3.50 through 1.4.5 OpenAFS versions 1.5.0 through 1.5.27 openafs prior to version 1.4.6

Description A race condition in the fileserver of OpenAFS allows remote attackers to cause a denial of service by simultaneously acquiring and giving back file callbacks. This causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host glock lock, leading to a daemon crash. The issue can be exploited remotely and may lead to disruption of protected information.

Recommendations For OpenAFS versions 1.3.50 through 1.4.5, update to version 1.4.6 or later. For OpenAFS versions 1.5.0 through 1.5.27, update to a version later than 1.5.27. For openafs prior to version 1.4.6, update to version 1.4.6 or later. As a temporary workaround, consider restricting access to the fileserver to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2015-01299

BDU:2015-09620

CVE-2007-6599

DSA-1458-1

Affected Products

Openafs

References · 20

• http://security.gentoo.org/glsa/glsa-200801-04.xml · Vendor Advisory
• http://debian.org/security/2008/dsa-1458 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-6599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6599 · Security Note
• http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01299 · Security Note
• https://bdu.fstec.ru/vul/2015-09620 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6599 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:207 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-6599 · Vendor Advisory
• http://novell.com/linux/security/advisories/suse_security_summary_report.html · Vendor Advisory
• http://openafs.org/security/OPENAFS-SA-2007-003.txt · Vendor Advisory
• http://debian.org/security/dsa-1458 · Note
• http://secunia.com/advisories/28401 · Note