• info
• discussion
• exploit
• solution
• references

OpenAFS FetchStatus Reply Privilege Escalation Vulnerability

OpenAFS is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary commands with superuser privileges on the affected computer.

OpenAFS 1.4.3 (and prior versions) and 1.5.0 through 1.5.16 are affected by this vulnerability.