CVE-2015-6398: Undefined Security Weakness

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

CVE-2016-1302: Improper Access Control

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability

A vulnerability in the ICMP implementation in the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch could allow an unauthenticated, remote attacker to cause the switch to reload, resulting in a denial of service DoS condition. The vulnerability is due to improper handling...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Summary: CVE-2015-4235 affects Cisco APIC and Nexus 9000 ACI devices; versioned software before 1.0(3o) and 1.1 before 1.1(1j) on APIC, and before 11.0(4o)/11.1 before 11.1(1j) on Nexus 9000 ACI, do not properly restrict access to the APIC filesystem. This enables remote authenticated users to ob...

CVE-2015-4235: Undefined Security Weakness

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CentOS 7 : ipa / slapi-nis (CESA-2015:0728)

Updated ipa and slapi-nis packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20150305)

An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive...

389-ds-base security and bug fix update

1.2.11.15-14 - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so ticket 627 - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion ticket 623 1.2.11.15-13 - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20120620)

The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. A flaw was found in the way the 389 Directory Server daemon ns-slapd handled access control instructions AC...

CVE-2012-0833

The acllashandlegroupentry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions ACIs that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service...

CVE-2001-0971

CVE-2001-0971 affects the ACI/4D WebServer. The 4D WebServer (versions 6.5.7 and earlier) fails to validate HTTP requests, enabling directory traversal that allows remote attackers to read arbitrary files outside the web root. Impact is remote file disclosure with web server privileges. The CERT/...

CVE-2001-0971

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. dot dot or drive letter e.g., C: in an HTTP request...

CVE-2001-0971: Undefined Security Weakness

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. dot dot or drive letter e.g., C: in an HTTP request...

CVE-2001-0971

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. dot dot or drive letter e.g., C: in an HTTP request...

ACI 4D WebServer Directory traversal.

vendor: http://www.4d.com/ current version: 6.7 tested version: 6.57 , others? This directory transversal hole seems to work on ACI 4d webserver running on the NT platform. I would imagine exploitation on a macos box would be similar but would require the proper mac filesystem path to the file yo...