CVE-2013-1841

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

CVE-2013-1841

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

DEBIAN-CVE-2013-1841

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

Design/Logic Flaw

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

CVE-2013-1841

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

CVE-2013-1841

CVE-2013-1841 concerns the Perl module Net-Server. When the reverse-lookup option is enabled, Net-Server does not verify that the provided hostname resolves to the source IP address, which could allow remote attackers to bypass ACL restrictions via the hostname parameter. The connected advisories...

CVE-2013-1841

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...

PT-2014-2503 · Unknown +2 · Net-Server +2

Name of the Vulnerable Software and Affected Versions: Net-Server affected versions not specified Description: The issue allows remote attackers to potentially bypass ACL restrictions. This is possible when the reverse-lookups option is enabled and the hostname is used as a parameter, as the syst...

openSUSE Security Update : spice-gtk (openSUSE-SU-2013:1562-1)

spice-gtk received fixes for the acl helper policy kit checks that had a race condition in PID checking. CVE-2013-4324, bnc844967. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : Kernel (openSUSE-SU-2012:0812-1)

This kernel update of the openSUSE 12.1 kernel brings various bug and security fixes. Following issues were fixed : - tcp: drop SYN+FIN messages bnc765102, CVE-2012-2663. - net: sock: validate datalen before allocating skb in sockallocsendpskb bnc765320, CVE-2012-2136. - thp: avoid atomic64read i...

openSUSE Security Update : dovecot12 (openSUSE-SU-2010:0923-1)

dovecot granted admin rights to all owner mailboxes CVE-2010-3706. When using multiple ACL entries for mailboxes the most specific one was not always applied CVE-2010-3707. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

Fedora 20 : dovecot-2.2.13-1.fc20 (2014-6338)

Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

Authentication flaw

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware is affected by an ACL bypass vulnerability. The root cause is ACLs that do not properly handle IGMPv2/v3 traffic, allowing remote attackers to bypass deny statements by sending crafted IGMPv2 or IGMPv3 packets. Impact is remote, u...

Cisco Nexus 1000V Access Control List Bypass Vulnerability

A vulnerability in Cisco Nexus 1000V switches could allow an unauthenticated, remote attacker to bypass deny statements in access control lists ACLs with certain types of Internet Group Management Protocol version 2 IGMPv2 or IGMP version 3 IGMPv3 traffic. IGMP version 1 IGMPv1 is not affected. T...

Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei)

A kernel pool overflow in Win32k which allows local privilege escalation. The kernel shellcode nulls the ACL for the winlogon.exe process a SYSTEM process. This allows any unprivileged process to freely migrate to winlogon.exe, achieving privilege escalation. Used in pwn2own 2013 by MWR to break...

Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows NTUserMessageCall Win32k Kernel Pool Overflow...