CVE-2015-3283 Auth bypass in n/a

What is CVE-2015-3283?

CVE-2015-3283 is a medium-severity authentication bypass vulnerability in n/a, published on 12 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.

Weakness: CWE-264

Which versions are affected by CVE-2015-3283?

It affects 1 product.

Products include Openafs Openafs.

How do I fix CVE-2015-3283?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2015-3283 being exploited?

There is no known exploitation of CVE-2015-3283 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2009-1251 Memory corruption in n/a Critical 10.0
• CVE-2024-10394 Theft of credentials in Unix client PAGs High 8.4
• CVE-2024-10397 Preallocated buffer overflows in XDR responses High 7.7
• CVE-2019-18601 Denial of service in n/a High 7.5
• CVE-2011-0430 Use after free in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-3283, GHSA-9w9q-w9xf-7wgw, UBUNTU-CVE-2015-3283.