| Package | Affected versions | Patched versions |
|---|---|---|
| openafs | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.4a= 1.1= 1.1.0= 1.1.1= 1.1.1a= 1.2= 1.2.1= 1.2.10= 1.2.11= 1.2.13= 1.2.2= 1.2.2a= 1.2.2b= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 1.3= 1.3.1= 1.3.2= 1.3.5= 1.3.70= 1.3.74= 1.3.77= 1.3.81= 1.4= 1.4.0= 1.4.1= 1.4.12= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.7_pre1= 1.4.7_pre2= 1.4.7_pre3= 1.4.7_pre4= 1.4.7_pre5= 1.4.8= 1.4.8_pre1= 1.4.8_pre2= 1.4.8_pre3= 1.6.0= 1.6.1= 1.6.2= 1.6.2.1= 1.6.3= 1.6.4= 1.7.1= 1.7.10= 1.7.11= 1.7.12= 1.7.13= 1.7.14= 1.7.15= 1.7.16= 1.7.17= 1.7.18= 1.7.19= 1.7.2= 1.7.20= 1.7.21= 1.7.22= 1.7.23= 1.7.24= 1.7.25= 1.7.3= 1.7.4= 1.7.8≤ 1.4.14 |
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free