Afs3-fileserver Exploit: ((full))
Network-based. An attacker can connect to an OpenAFS fileserver over the network and trigger the use of uninitialized memory by sending specific, crafted RPC requests. Remote Code Execution (RCE):
# Define the token generation algorithm def generate_token(prng_seed): # Generate a token using the PRNG token = struct.pack('>I', prng_seed) return token afs3-fileserver exploit
Historical issues in the Rx RPC protocol, including integer overflows in XDR decoding, have allowed remote attackers to execute code with the privileges of the fileserver process. Information Leaks (CVE-2015-3282): Network-based