Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers Advisory ID: cisco-sa-20100908-wlc Revision 1.0 For Public Release 2010 September 08 1600 UTC GMT +--------------------------------------------------------------------...

Fedora 12 : dokuwiki-0-0.4.20091225.c.fc12 (2010-0800)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

PYSEC-2010-13

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

CVE-2009-4762

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

CVE-2003-1575

The CVE-2003-1575 entry concerns VERITAS File System (VxFS) versions 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9. The issue is an incorrect inheritance of default ACLs related to directory inode characteristics, which can allow local users to bypass intended fi...

SuSE 11 Security Update : Samba (SAT Patch Number 1053)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba. CVE-2009-1888 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

openSUSE Security Update : cifs-mount (cifs-mount-1036)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba CVE-2009-1888. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-1036. The text...

openSUSE Security Update : cifs-mount (cifs-mount-1036)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba CVE-2009-1888. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-1036. The text...

Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞

安全公告 月度Top10安全漏洞 每日漏洞播报 Cisco PIX/ASA拒绝服务，ACL绕过及验证绕过漏洞 发布时间：2009-04-09 录入：启明星辰 BUGTRAQ ID: 34429 CVE ID：CVE-2009-1155 CVE-2009-1156 CVE-2009-1157 CVE-2009-1158 CVE-2009-1159 CVE-2009-1160 CNCVE ID：CNCVE-20091155 CNCVE-20091156 CNCVE-20091157 CNCVE-20091158 CNCVE-20091159 CNCVE-20091160 Cisco...

Code injection

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

CVE-2008-6548

Removed by vendor...

PT-2008-3576 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance version 8.0.x before 8.039 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances affected versions not specified Description: The issue allo...

CVE-2008-1099

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...

SOL7009 - Statement on ACL bypass using trailing NULL byte - MNIN/NNL Advisory

A January 2007 security advisory describes several security issues present in some versions of FirePass software. One section in the document, titled ACL Filter bypass with URL de-normalization, states that Portal Access ACL filters can be bypassed if a user appends a trailing NULL byte after the...

CVE-2006-4184

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists ACL in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information...

security flaw

nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAYSATTR privilege before setting access controls ACL on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems...

dokuwiki -- multiple vulnerabilities

Multiple vulnerabilities have been reported within dokuwiki. dokuwiki is proven vulnerable to: arbitrary PHP code insertion via spellcheck module, XSS attack via "Update your account profile," bypassing of ACL controls when enabled...

CUPS < 1.1.23 Multiple Vulnerabilities

CUPS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:cups"; ifdescription...

Mandrake Linux Security Advisory : cups (MDKSA-2005:165)

A vulnerability in CUPS would treat a Location directive in cupsd.conf as case-sensitive, allowing attackers to bypass intended ACLs via a printer name containing uppercase or lowecase letters that are different from that which was specified in the Location directive. This issue only affects...