Debian/openafs: unknown

The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response to

Action: Upgrade openafs to 1.4.2-6 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1507#Debian:13/openafs
• https://security-tracker.debian.org/tracker/CVE-2007-1507

published 2007-03-20T10:19:00Z · modified 2026-10-21T17:47:38.790764650Z · JSON