CVE

Id
29956  
CVE No.
CVE-2007-6599  
Status
Candidate  
Description
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.  
Phase
Assigned (20071231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316788 29956 CVE-2007-6599 MLIST:[OpenAFS-announce] 20071220 OpenAFS Security Advisory 2007-003: denial of service in OpenAFS fileserver  View
316789 29956 CVE-2007-6599 URL:http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html  View
316790 29956 CVE-2007-6599 CONFIRM:http://www.openafs.org/security/OPENAFS-SA-2007-003.txt  View
316791 29956 CVE-2007-6599 DEBIAN:DSA-1458  View
316792 29956 CVE-2007-6599 URL:http://www.debian.org/security/2008/dsa-1458  View
316793 29956 CVE-2007-6599 GENTOO:GLSA-200801-04  View
316794 29956 CVE-2007-6599 URL:http://security.gentoo.org/glsa/glsa-200801-04.xml  View
316795 29956 CVE-2007-6599 MANDRIVA:MDVSA-2008:207  View
316796 29956 CVE-2007-6599 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:207  View
316797 29956 CVE-2007-6599 SUSE:SUSE-SR:2008:002  View
316798 29956 CVE-2007-6599 URL:http://www.novell.com/linux/security/advisories/suse_security_summary_report.html  View
316799 29956 CVE-2007-6599 BID:27132  View
316800 29956 CVE-2007-6599 URL:http://www.securityfocus.com/bid/27132  View
316801 29956 CVE-2007-6599 VUPEN:ADV-2008-0046  View
316802 29956 CVE-2007-6599 URL:http://www.vupen.com/english/advisories/2008/0046  View
316803 29956 CVE-2007-6599 SECUNIA:28327  View
316804 29956 CVE-2007-6599 URL:http://secunia.com/advisories/28327  View
316805 29956 CVE-2007-6599 SECUNIA:28401  View
316806 29956 CVE-2007-6599 URL:http://secunia.com/advisories/28401  View
316807 29956 CVE-2007-6599 SECUNIA:28433  View
316808 29956 CVE-2007-6599 URL:http://secunia.com/advisories/28433  View
316809 29956 CVE-2007-6599 SECUNIA:28636  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45698 JVNDB-2008-001008 PostgreSQL の DBLink モジュールにおける権限昇格の脆弱性 PostgreSQL の DBLink モジュールには、local trust もしくは ident 認証を使用している場合、それらの認証を用いてデータベースへアクセスが可能となる脆弱性が存在します。 CVE-2007-6601 29956 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001008.html  View