Test ID:	1.3.6.1.4.1.25623.1.0.808077
Category:	Denial of Service
Title:	OpenAFS Denial of Service Vulnerability - 01 - Windows
Summary:	OpenAFS is prone to a denial of service (DoS) vulnerability.
Description:	Summary: OpenAFS is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to the kernel handling of the FS command for OSD uses a pointer to the wrong in-kernel memory when returning the result of the RPC. Vulnerability Impact: Successful exploitation will allow local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command. Affected Software/OS: OpenAFS version 1.0.3 through 1.6.12 on Windows. Solution: Update to OpenAFS version 1.6.13 or later. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3285 Debian Security Information: DSA-3320 (Google Search) http://www.debian.org/security/2015/dsa-3320 https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html http://www.securitytracker.com/id/1033262
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.