CVE-2009-1251

Published: Apr 9, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.

Affected (72)

Products: Unix: Unix · Openafs: Openafs

1 product

1 product

Configuration A

72 vulnerable

Vulnerable Software	Affected Versions
Unix Unix	All versions
Openafs Openafs	Version 1.0.1
Openafs Openafs	Version 1.0.2
Openafs Openafs	Version 1.0.3
Openafs Openafs	Version 1.0.4
Openafs Openafs	Version 1.0.4a
Openafs Openafs	Version 1.0
Openafs Openafs	Version 1.1.0
Openafs Openafs	Version 1.1.1
Openafs Openafs	Version 1.1.1a
Openafs Openafs	Version 1.1
Openafs Openafs	Version 1.2.10
Openafs Openafs	Version 1.2.11
Openafs Openafs	Version 1.2.13
Openafs Openafs	Version 1.2.1
Openafs Openafs	Version 1.2.2
Openafs Openafs	Version 1.2.2a
Openafs Openafs	Version 1.2.2b
Openafs Openafs	Version 1.2.3
Openafs Openafs	Version 1.2.4
Openafs Openafs	Version 1.2.5
Openafs Openafs	Version 1.2.6
Openafs Openafs	Version 1.2.7
Openafs Openafs	Version 1.2.8
Openafs Openafs	Version 1.2.9
Openafs Openafs	Version 1.2
Openafs Openafs	Version 1.3.1
Openafs Openafs	Version 1.3.2
Openafs Openafs	Version 1.3.5
Openafs Openafs	Version 1.3.70
Openafs Openafs	Version 1.3.74
Openafs Openafs	Version 1.3.77
Openafs Openafs	Version 1.3.81
Openafs Openafs	Version 1.3
Openafs Openafs	Version 1.4.0
Openafs Openafs	Version 1.4.3
Openafs Openafs	Version 1.4.4
Openafs Openafs	Version 1.4.5
Openafs Openafs	Version 1.4.6
Openafs Openafs	Version 1.4.7
Openafs Openafs	Version 1.4.7_pre1
Openafs Openafs	Version 1.4.7_pre2
Openafs Openafs	Version 1.4.7_pre3
Openafs Openafs	Version 1.4.7_pre4
Openafs Openafs	Version 1.4.7_pre5
Openafs Openafs	Version 1.4.8
Openafs Openafs	Version 1.4.8_pre1
Openafs Openafs	Version 1.4.8_pre2
Openafs Openafs	Version 1.4.8_pre3
Openafs Openafs	Version 1.4
Openafs Openafs	Version 1.5.16
Openafs Openafs	Version 1.5.17
Openafs Openafs	Version 1.5.26
Openafs Openafs	Version 1.5.27
Openafs Openafs	Version 1.5.30
Openafs Openafs	Version 1.5.31
Openafs Openafs	Version 1.5.32
Openafs Openafs	Version 1.5.33
Openafs Openafs	Version 1.5.34
Openafs Openafs	Version 1.5.35
Openafs Openafs	Version 1.5.36
Openafs Openafs	Version 1.5.38
Openafs Openafs	Version 1.5.39
Openafs Openafs	Version 1.5.50
Openafs Openafs	Version 1.5.52
Openafs Openafs	Version 1.5.53
Openafs Openafs	Version 1.5.54
Openafs Openafs	Version 1.5.55
Openafs Openafs	Version 1.5.56
Openafs Openafs	Version 1.5.57
Openafs Openafs	Version 1.5.58
Openafs Openafs	Version 1.5