CVE-2018-16947
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-16947
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, including dumping/restoring volume contents and manipulating the backup database. For example, an unauthenticated attacker can replace any volume's content with arbitrary data.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenAFS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenAFS是一套分布式文件系统，它允许系统之间通过局域网和广域网来分享档案和资源。 OpenAFS 1.6.23之前版本和1.8.2之前的1.8.x版本中存在安全漏洞，该漏洞源于backup tape控制器进程没有对进入的RPCs要求身份验证。攻击者可利用该漏洞借助管理员凭证执行操作，转储/存储卷内容并操纵备份数据库。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-16947
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-16947
请登录查看更多情报信息。
- http://openafs.org/pages/security/OPENAFS-SA-2018-001.txtx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-16947
Same Patch Batch · n/a · 2018-09-12 · 31 CVEs total
| CVE-2018-16388 | e107 安全漏洞 | |
| CVE-2018-16951 | xunfeng 命令注入漏洞 | |
| CVE-2018-16949 | OpenAFS 安全漏洞 | |
| CVE-2018-16948 | OpenAFS 安全漏洞 | |
| CVE-2018-16946 | 多款LG产品安全漏洞 | |
| CVE-2018-16950 | Inteno DG400 输入验证错误漏洞 | |
| CVE-2018-3882 | Frappe ERPNext SQL注入漏洞 | |
| CVE-2017-18347 | STMicroelectronics STM32F0 安全漏洞 | |
| CVE-2018-7572 | Pulse Secure Client 安全漏洞 | |
| CVE-2018-16729 | Pluck 跨站脚本漏洞 | |
| CVE-2018-16728 | feindura 跨站脚本漏洞 | |
| CVE-2018-16727 | razorCMS 设置组件跨站脚本漏洞 | |
| CVE-2018-16726 | razorCMS 跨站脚本漏洞 | |
| CVE-2018-16605 | D-Link DIR-600M 跨站脚本漏洞 | |
| CVE-2018-16389 | e107 SQL注入漏洞 | |
| CVE-2018-16977 | Monstra CMS 安全漏洞 | |
| CVE-2018-15834 | radare2 缓冲区错误漏洞 | |
| CVE-2018-15502 | Lone Wolf Technologies loadingDOCS 安全漏洞 | |
| CVE-2018-13412 | ZOHO ManageEngine Desktop Central 权限许可和访问控制问题漏洞 | |
| CVE-2018-13411 | ZOHO ManageEngine Desktop Central 权限许可和访问控制问题漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-16947
No comments yet