661 matches found
security flaw
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...
CVE-2004-2154
CVE-2004-2154 affects CUPS prior to 1.1.21rc1, where a Location directive in cupsd.conf is treated as case sensitive. This allows bypassing ACLs by using a printer name whose capitalization differs from that in the directive, enabling unauthorized access to printers. The issue is propagated acros...
CVE-2004-2154
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...
CVE-2001-1500
ProFTPD 1.2.2rc2 (and possibly other versions) is affected by a DNS validation issue where reverse-resolved hostnames are not properly verified via forward resolution. This can allow remote attackers to bypass access control lists or log an incorrect client hostname. The available connected docum...
FWSM URL Filtering Solution TCP ACL Bypass Vulnerability
...
CVE-2005-1517
The Cisco Firewall Services Module (FWSM) 2.3.1 and earlier is affected by a vulnerability where TCP packets can bypass access control lists (ACLs) when URL, FTP, or HTTPS filtering exceptions are used. This is documented in CVE-2005-1517 and referenced in Cisco’s security advisory and NVD record...
[SECURITY] [DSA 721-1] New squid packages fix ACL bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 721-1 [email protected] http://www.debian.org/security/ Martin Schulze May 6th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 721-1] New squid packages fix ACL bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 721-1 [email protected] http://www.debian.org/security/ Martin Schulze May 6th, 2005 http://www.debian.org/security/faq -...
Mandrake Linux Security Advisory : squid (MDKSA-2005:078)
Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...
GLSA-200501-25 : Squid: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200501-25 Squid: Multiple vulnerabilities Squid contains a vulnerability in the gopherToHTML function CAN-2005-0094 and incorrectly checks the 'number of caches' field when parsing WCCPISEEYOU messages CAN-2005-0095. Furthermore t...
CVE-2005-0173
Summary: CVE-2005-0173 affects Squid 2.5 and earlier, where squid_ldap_auth may bypass username-based ACLs when a username has spaces at the start or end, ignored by the LDAP server. The issue enables potential unauthorized access as the LDAP handling laxity can lead to bypassing explicit ACLs (i...
CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...
Squid < 2.5.STABLE7 Report Information Disclosure
Binary data 2491.prm...
CVE-2004-2154
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...
BSD bmon 1.2.1_2 - Local acls Bypass
!/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat...
Debian DSA-474-1 : squid - ACL bypass
A vulnerability was discovered in squid, an Internet object cache, whereby access control lists based on URLs could be bypassed CAN-2004-0189. Two other bugs were also fixed with patches squid-2.4.STABLE7-urlescape.patch a buffer overrun which does not appear to be exploitable and...
Cisco IOS ACL Bypass (Bug ID CSCdi34061)
Binary data 2197.prm...
Cisco IOS ACL Bypass (Bug ID CSCdi36962)
Binary data 2199.prm...