medium4.3
CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.
Impact
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openafs | Openafs | through 1.6.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2015/dsa-3320
- http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txt
- http://www.securitytracker.com/id/1033262
- https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
- https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13
- http://www.debian.org/security/2015/dsa-3320
- http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txt
- http://www.securitytracker.com/id/1033262
- https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
- https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13