296,147
Total vulnerabilities in the database
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
| Software | From | Fixed in |
|---|---|---|
| openafs / openafs | 1.9.0 | 1.9.0.x |
| openafs / openafs | 1.0 | 1.6.25 |
| openafs / openafs | 1.8.0 | 1.8.13 |