4068 matches found
Cisco IOS ACL控制绕过漏洞
No description provided by source...
Cisco IOS Virtual PPP ACL控制绕过漏洞
No description provided by source...
Design/Logic Flaw
Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...
CVE-2015-6365
Cisco IOS Software CVE-2015-6365 affects IOS releases 15.2(04)M and 15.4(03)M, where physical-interface ACLs can supersede virtual PPP interface ACLs. This allows an authenticated remote user connected to a PPP session to bypass ACLs on virtual PPP interfaces and potentially pass traffic that sho...
CVE-2015-6366
Cisco IOS 15.204M6 and 15.403S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042...
CVE-2008-5617
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
CVE-2007-0454
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping...
libvirt -- ACL bypass using ../ to access beyond storage pool
Libvit development team reports: Various virStorageVol API operate on user-supplied volume names by concatenating the volume name to the pool location. Note that the virStoragePoolListVolumes API, when used on a storage pool backed by a directory in a file system, will only list volumes immediate...
CVE-2015-7859
The comcontenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-7899
The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...
Information disclosure
The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-7899
The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-7859
The comcontenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-7899
The CVE-2015-7899 entry affects Joomla! 3.x before 3.4.5, with the com_content component failing to properly check ACLs. This results in information disclosure where a remote attacker may obtain sensitive data via unspecified vectors. The issue is tied to inadequate ACL enforcement in com_content...
FreeBSD : Joomla! -- Core - ACL Violation vulnerabilities (03e54e42-7ac6-11e5-b35a-002590263bf5)
The JSST and the Joomla! Security Center report : 20151003 - Core - ACL Violations Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
FreeBSD : Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities (0ebc6e78-7ac6-11e5-b35a-002590263bf5)
The JSST and the Joomla! Security Center report : 20151001 - Core - SQL Injection Inadequate filtering of request data leads to a SQL Injection vulnerability. 20151002 - Core - ACL Violations Inadequate ACL checks in comcontenthistory provide potential read access to data which should be access...
Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities
The JSST and the Joomla! Security Center report: 20151001 - Core - SQL Injection Inadequate filtering of request data leads to a SQL Injection vulnerability. 20151002 - Core - ACL Violations Inadequate ACL checks in comcontenthistory provide potential read access to data which should be access...
Joomla! -- Core - ACL Violation vulnerabilities
The JSST and the Joomla! Security Center report: 20151003 - Core - ACL Violations Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted...
