OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.
{ "urgency": "not yet assigned" }