[SA34655] OpenAFS Client Two Vulnerabilities

----------------------------------------------------------------------

Secunia is pleased to announce the release of the annual Secunia
report for 2008.

Highlights from the 2008 report:
* Vulnerability Research
* Software Inspection Results
* Secunia Research Highlights
* Secunia Advisory Statistics

Request the full 2008 Report here:
http://secunia.com/advisories/try_vi/request_2008_report/

Stay Secure,

Secunia

----------------------------------------------------------------------

TITLE:
OpenAFS Client Two Vulnerabilities

SECUNIA ADVISORY ID:
SA34655

VERIFY ADVISORY:
http://secunia.com/advisories/34655/

DESCRIPTION:
Two vulnerabilities have been reported in OpenAFS, which can be
exploited by malicious people to cause a DoS (Denial of Service) or
to potentially compromise a user's system.

1) Several boundary errors in the OpenAFS client can be exploited to
cause a heap-based buffer overflow in kernel space via a specially
crafted server packet.

NOTE: This vulnerability affects all Unix clients, excluding clients
for Mac OS X 10.4 and 10.5 systems.

Successful exploitation may allow execution of arbitrary code.

2) An error in the OpenAFS client can be exploited to trigger the
improper usage of server error codes as pointers and crash the Linux
cache manager, leading to a kernel panic.

NOTE: This vulnerability affects Linux clients only.

Successful exploitation of the vulnerabilities requires the ability
to send specially crafted file server packets.

The vulnerabilities are reported in versions 1.0 through 1.4.8 and
1.5.0 through 1.5.58.

SOLUTION:
Update to version 1.4.9 or 1.5.59, or apply patches:
http://www.openafs.org/security/openafs-sa-2009-001.patch
http://www.openafs.org/security/openafs-sa-2009-002.patch

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) Simon Wilkinson
2) Toby Blake

ORIGINAL ADVISORY:
http://www.openafs.org/security/OPENAFS-SA-2009-001.txt
http://www.openafs.org/security/OPENAFS-SA-2009-002.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=wz.bluesnow.secunia%40blogger.com

----------------------------------------------------------------------