CVE-2009-1250

Executive Summary

Informations
Name	CVE-2009-1250	First vendor Publication	2009-04-08
Vendor	Cve	Last vendor Modification	2011-01-26

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1250

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Ibm Afs cpe:/a:ibm:afs:3.6:patch18 cpe:/a:ibm:afs:3.6:patch13 cpe:/a:ibm:afs:3.6:patch14 cpe:/a:ibm:afs:3.6:patch16 cpe:/a:ibm:afs:3.6:patch12 cpe:/a:ibm:afs:3.6:patch15 cpe:/a:ibm:afs:3.6	7
Application	Openafs Openafs cpe:/a:openafs:openafs:1.5.58 cpe:/a:openafs:openafs:1.5.57 cpe:/a:openafs:openafs:1.5.56 cpe:/a:openafs:openafs:1.5.55 cpe:/a:openafs:openafs:1.5.54 cpe:/a:openafs:openafs:1.5.53 cpe:/a:openafs:openafs:1.5.52 cpe:/a:openafs:openafs:1.5.50 cpe:/a:openafs:openafs:1.5.39 cpe:/a:openafs:openafs:1.5.38 cpe:/a:openafs:openafs:1.5.36 cpe:/a:openafs:openafs:1.5.35 cpe:/a:openafs:openafs:1.5.34 cpe:/a:openafs:openafs:1.5.33 cpe:/a:openafs:openafs:1.5.32 cpe:/a:openafs:openafs:1.5.31 cpe:/a:openafs:openafs:1.5.30 cpe:/a:openafs:openafs:1.5.27 cpe:/a:openafs:openafs:1.5.26 cpe:/a:openafs:openafs:1.5.17 cpe:/a:openafs:openafs:1.5.16 cpe:/a:openafs:openafs:1.5 cpe:/a:openafs:openafs:1.4.8_pre3 cpe:/a:openafs:openafs:1.4.8_pre2 cpe:/a:openafs:openafs:1.4.8_pre1 cpe:/a:openafs:openafs:1.4.8 cpe:/a:openafs:openafs:1.4.7_pre5 cpe:/a:openafs:openafs:1.4.7_pre4 cpe:/a:openafs:openafs:1.4.7_pre3 cpe:/a:openafs:openafs:1.4.7_pre2 cpe:/a:openafs:openafs:1.4.7_pre1 cpe:/a:openafs:openafs:1.4.7 cpe:/a:openafs:openafs:1.4.6 cpe:/a:openafs:openafs:1.4.5 cpe:/a:openafs:openafs:1.4.4 cpe:/a:openafs:openafs:1.4.3 cpe:/a:openafs:openafs:1.4.0 cpe:/a:openafs:openafs:1.4 cpe:/a:openafs:openafs:1.3.81 cpe:/a:openafs:openafs:1.3.77 cpe:/a:openafs:openafs:1.3.74 cpe:/a:openafs:openafs:1.3.70 cpe:/a:openafs:openafs:1.3.5 cpe:/a:openafs:openafs:1.3.2 cpe:/a:openafs:openafs:1.3.1 cpe:/a:openafs:openafs:1.3 cpe:/a:openafs:openafs:1.2.9 cpe:/a:openafs:openafs:1.2.8 cpe:/a:openafs:openafs:1.2.7 cpe:/a:openafs:openafs:1.2.6 cpe:/a:openafs:openafs:1.2.5 cpe:/a:openafs:openafs:1.2.4 cpe:/a:openafs:openafs:1.2.3 cpe:/a:openafs:openafs:1.2.2b cpe:/a:openafs:openafs:1.2.2a cpe:/a:openafs:openafs:1.2.2 cpe:/a:openafs:openafs:1.2.13 cpe:/a:openafs:openafs:1.2.11 cpe:/a:openafs:openafs:1.2.10 cpe:/a:openafs:openafs:1.2.1 cpe:/a:openafs:openafs:1.2 cpe:/a:openafs:openafs:1.1.1a cpe:/a:openafs:openafs:1.1.1 cpe:/a:openafs:openafs:1.1.0 cpe:/a:openafs:openafs:1.1 cpe:/a:openafs:openafs:1.0.4a cpe:/a:openafs:openafs:1.0.4 cpe:/a:openafs:openafs:1.0.3 cpe:/a:openafs:openafs:1.0.2 cpe:/a:openafs:openafs:1.0.1 cpe:/a:openafs:openafs:1.0	71

Open Source Vulnerability Database (OSVDB)

id	Description
55273	OpenAFS Client on Linux Cache Manager RX Response Handling Remote DoS

Internal Sources (Detail)

Source	Url
AIXAPAR	http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123
BID	http://www.securityfocus.com/bid/34404
CONFIRM	http://www-01.ibm.com/support/docview.wss?uid=swg21396389 http://www.openafs.org/security/openafs-sa-2009-002.patch http://www.openafs.org/security/OPENAFS-SA-2009-002.txt
DEBIAN	http://www.debian.org/security/2009/dsa-1768
GENTOO	http://security.gentoo.org/glsa/glsa-201101-05.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2009:099
SECUNIA	http://secunia.com/advisories/34655 http://secunia.com/advisories/34684 http://secunia.com/advisories/36310 http://secunia.com/advisories/42896
VUPEN	http://www.vupen.com/english/advisories/2009/0984 http://www.vupen.com/english/advisories/2011/0117

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:48:17	Multiple Updates

Type	Count
CPE ID(s)	78
osvdb(s)	1

Related	Severity
MDVSA-2009:099-1	(Critical)
MDVSA-2009:099	(Critical)
GLSA-201101-05	(Critical)
DSA-1768	(Critical)

Same Subject	Severity
Login to view 1 more Alert(s)

CVE-2009-1250

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU