Afs3-fileserver Exploit Extra Quality Page

The vulnerability (most notably CVE-2019-14877 and CVE-2019-14878 ) refers to a set of security flaws in the OpenAFS distributed filesystem. These vulnerabilities primarily involve buffer overflows and information leaks within the Rx RPC protocol used by the fileserver process. Vulnerability Overview

And because AFS3’s global namespace looked like a utopia in 1995, that same utopia today has a skeleton key swinging in the front door — waiting for someone to turn it.

Historical exploits have leveraged the way AFS fileservers handle acknowledgment packets. By sending high volumes of crafted RX packets, attackers can cause thread exhaustion, effectively locking out legitimate users. Cleartext Authentication:

Sources:

The AFS3 file server, a part of the Andrew File System (AFS), is a distributed file system protocol that allows for the sharing of files across a network. While AFS3 has been widely used in academic and research environments, its popularity has also made it a target for malicious actors. This paper provides an in-depth analysis of a potential exploit in the AFS3 file server, highlighting the vulnerabilities and potential attack vectors.