CVEvulnerability
CVE-2016-9772
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.
Affected configurations
• openafs openafs (<= 1.6.19)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.openwall.com/lists/oss-security/2016/12/02/9 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/94651 Third Party Advisory, VDB Entry
- https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt Vendor Advisory
- http://www.openwall.com/lists/oss-security/2016/12/02/9 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/94651 Third Party Advisory, VDB Entry
- https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt Vendor Advisory