[ GLSA 201101-05 ] OpenAFS: Arbitrary code execution

[GLSA]

Gentoo Linux Security Advisory

Title: OpenAFS: Arbitrary code execution (GLSA 201101-05)
Severity: normal
Exploitable: remote
Date: January 16, 2011
Bug(s): #265538
ID: 201101-05

Synopsis


The cache manager of OpenAFS contains several bugs resulting in remote
execution of arbitrary code.


Background


OpenAFS is a distributed file system.


Affected Packages

Package: net-fs/openafs
Vulnerable: < 1.4.9
Unaffected: >= 1.4.9
Architectures: All supported architectures


Description


Two vulnerabilities were discovered:

• 
  Simon Wilkinson discovered from a bug report by Toby Blake that the
  cache manager of OpenAFS contains a heap-based buffer overflow which is
  related to the use of the ERR_PTR macro (CVE-2009-1250).
• A
  pointer dereference bug when using XDR arrays was discovered by Simon
  Wilkinson, with assistance from Derrick Brashear and Jeffrey Altman.
  (CVE-2009-1251).

Impact


The vulnerabilities might allow remote unauthenticated attackers to
cause a Denial of Service (system crash) and possibly execute arbitrary
code.


Workaround


There is no known workaround at this time.


Resolution


All OpenAFS users should upgrade to the latest version: