Secunia

A vulnerability has been reported in OpenAFS, which can be exploited by malicious users to cause a DoS (Denial od Service).

The vulnerability is caused due to a race condition error within the "GiveUpAllCallBacks" RPC handler and can be exploited to crash the file server by simultaneously acquiring and giving back callbacks on a file.

The vulnerability is reported in the following versions:
* OpenAFS 1.3.x subsequent to 1.3.50
* OpenAFS 1.4.x up to and including OpenAFS 1.4.5
* OpenAFS 1.5.x up to and including OpenAFS 1.5.27

Solution
OpenAFS 1.4.x:
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Russ Allbery, Jeffrey Altman, Dan Hyde, and Thomas Mueller.

Original Advisory
http://www.openafs.org/security/OPENAFS-SA-2007-003.txt

Deep Links
Links available in Customer Area