CVE-2007-6599 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-6599
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6599

Description: Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

CVE Status: Candidate

References: SUSE http://www.novell.com/linux/security/advisories/suse_security_summary_report.html SAID Secunia Advisory: SA28327 Secunia Advisory: SA28401 Secunia Advisory: SA28433 Secunia Advisory: SA28636 MLIST http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:207 GENTOO http://security.gentoo.org/glsa/glsa-200801-04.xml DEBIAN http://www.debian.org/security/2008/dsa-1458 CONFIRM http://www.openafs.org/security/OPENAFS-SA-2007-003.txt BID 27132

Return to the previous page.