https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:17:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-43379 cnvd-2019-43379 https://cve.radiocsirt.org/vuln/cnvd-2019-43379 https://cve.radiocsirt.org/vuln/euvd-2026-68427 EUVD-2026-68427 https://cve.radiocsirt.org/vuln/euvd-2026-68427 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16947 <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16947 https://cve.radiocsirt.org/vuln/ghsa-67mr-rvh8-9qx2 <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> https://cve.radiocsirt.org/vuln/ghsa-67mr-rvh8-9qx2 https://cve.radiocsirt.org/vuln/gsd-2018-16947 gsd-2018-16947 https://cve.radiocsirt.org/vuln/gsd-2018-16947 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11113-1 <p>openafs-1.8.8-1.13 on GA media</p> <p>openafs-1.8.8-1.13 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11113-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16947 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openafs, Ubuntu:18.04:LTS: openafs</p> <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openafs, Ubuntu:18.04:LTS: openafs</p> <p>An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume&#39;s content with arbitrary data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16947