[OpenAFS] Is OpenAFS vulnerable to CA-2003-10 ?

Derrick J Brashear shadow@dementia.org
Fri, 21 Mar 2003 10:51:40 -0500 (EST)


On Fri, 21 Mar 2003, John Tang Boyland wrote:

> Cert has released a *new* advisory about XDR problems
> 	http://www.cert.org/advisories/CA-2003-10.html
> Is OpenAFS vulnerable to this problem?

OpenAFS provides, but does not use, xdrmem_getbytes