CVE-2009-1251

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

• unix unix • openafs openafs 1.0 • openafs openafs 1.0.1 • openafs openafs 1.0.2 • openafs openafs 1.0.3 • openafs openafs 1.0.4 • openafs openafs 1.0.4a • openafs openafs 1.1 • openafs openafs 1.1.0 • openafs openafs 1.1.1 • openafs openafs 1.1.1a • openafs openafs 1.2 • openafs openafs 1.2.1 • openafs openafs 1.2.2 • openafs openafs 1.2.2a • openafs openafs 1.2.2b • openafs openafs 1.2.3 • openafs openafs 1.2.4 • openafs openafs 1.2.5 • openafs openafs 1.2.6 • openafs openafs 1.2.7 • openafs openafs 1.2.8 • openafs openafs 1.2.9 • openafs openafs 1.2.10 • openafs openafs 1.2.11 • openafs openafs 1.2.13 • openafs openafs 1.3 • openafs openafs 1.3.1 • openafs openafs 1.3.2 • openafs openafs 1.3.5 • openafs openafs 1.3.70 • openafs openafs 1.3.74 • openafs openafs 1.3.77 • openafs openafs 1.3.81 • openafs openafs 1.4 • openafs openafs 1.4.0 • openafs openafs 1.4.3 • openafs openafs 1.4.4 • openafs openafs 1.4.5 • openafs openafs 1.4.6 • openafs openafs 1.4.7 • openafs openafs 1.4.7 pre1 • openafs openafs 1.4.7 pre2 • openafs openafs 1.4.7 pre3 • openafs openafs 1.4.7 pre4 • openafs openafs 1.4.7 pre5 • openafs openafs 1.4.8 • openafs openafs 1.4.8 pre1 • openafs openafs 1.4.8 pre2 • openafs openafs 1.4.8 pre3 • openafs openafs 1.5 • openafs openafs 1.5.16 • openafs openafs 1.5.17 • openafs openafs 1.5.26 • openafs openafs 1.5.27 • openafs openafs 1.5.30 • openafs openafs 1.5.31 • openafs openafs 1.5.32 • openafs openafs 1.5.33 • openafs openafs 1.5.34 … and 12 more