Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

A race condition in OpenAFS 1.3.40 through 1.4.5 allowed remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks (CVE-2007-6599).

The updated packages have been patched to prevent this issue.

This update fixes a remote denial of service (crash) against the openafs server. (CVE-2007-6599)

A race condition in the OpenAFS fileserver allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

The remote host is affected by the vulnerability described in GLSA-200801-04 (OpenAFS: Denial of Service)

    Russ Allbery, Jeffrey Altman, Dan Hyde and Thomas Mueller discovered a     race condition due to an improper handling of the clients callbacks     lists.
  Impact :

    A remote attacker could construct cases which trigger the race     condition, resulting in a server crash.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
36969	Mandriva Linux Security Advisory : openafs (MDVSA-2008:207)	Nessus	Mandriva Local Security Checks	medium
29962	openSUSE 10 Security Update : openafs (openafs-4887)	Nessus	SuSE Local Security Checks	medium
29935	Debian DSA-1458-1 : openafs - programming error	Nessus	Debian Local Security Checks	medium
29908	GLSA-200801-04 : OpenAFS: Denial of Service	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2007-6599

medium

Tenable Plugins

medium

medium

medium

medium