Medium: kernel

Issue Overview: It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL. CVE-2016-1237 A flaw was found in the Linux kernel's keyring handling code, where in keyrejectandlink an uninitialised...

Cisco Adaptive Security Appliance ICMP Echo Request ACL Bypass (cisco-sa-20160711-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is version 8.2.x or 9.4.x prior to 9.43.3, 9.5.x prior to 9.52.10, or 9.6.x prior to 9.61.5. It is, therefore, affected by an ACL bypass vulnerability due to a flaw in the...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Hardcoded credentials

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

CVE-2016-5821

CVE-2016-5821 affects Huawei HiSuite for Windows. A local attacker can exploit insecure ACLs on the HiSuite service directory to perform DLL hijacking (via SspiCli.dll or USERENV.dll, among others) and escalate to SYSTEM. Affected versions include HiSuite up to 4.0.3.301 (and variants like 4.0.4....

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability (cisco-sa-20160711-asa)

A vulnerability in the Cisco Adaptive Security Appliance ASA Software implementation of access control list ACL permit and deny filters for ICMP Echo Reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations for an affected device. ICMP traffic that should be...

Authentication flaw

Cisco Adaptive Security Appliance ASA Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes...

The vulnerability of Samba software allows a remote attacker to compromise the confidentiality and integrity of protected information.

A vulnerability exists in the ownerset function in smbcacls.c within smbcacls in Samba, due to the deletion of the access control list when the --chown or --chgrp parameter is used. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by making unauthorized...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

Design/Logic Flaw

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

CVE-2016-1237 affects the Linux kernel’s nfsd: a missing permissions check when setting POSIX ACLs allows a local user to bypass file-permission restrictions by manipulating ACLs (nfs2acl.c, nfs3acl.c, nfs4acl.c). The vulnerability is described as present in kernels up to 4.6.3 and is addressed i...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL...

Security Advisory 0022

Security Advisory 0022 PDF Date: June 28th, 2016 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | June 15th, 2016 | Initial release 1.1 | June 28th, 2016 | Updated to remove a part of the mitigation section that involved ipv6 ACLs with hop-limit. This section was removed in order to avoid a...

CVE-2016-2855

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...

Code injection

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...