CVE-2008-6603

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

Design/Logic Flaw

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

CVE-2008-6603

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

CVE-2008-6603

Removed by vendor...

CVE-2008-6603

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

CVE-2008-6603

CVE-2008-6603 affects MoinMoin 1.6.2 and 1.7, where ACL checks are not properly enforced when acl_hierarchic is True, potentially allowing remote attackers to bypass intended access restrictions. The description notes this as a different issue from CVE-2008-1937. Connected documents corroborate A...

CVE-2008-6548

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

Code injection

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

CVE-2008-6548

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

CVE-2008-6548

Removed by vendor...

CVE-2008-6548

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

Ubuntu Update for moin vulnerabilities USN-458-1

Ubuntu Update for Linux kernel vulnerabilities USN-458-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4581.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for moin vulnerabilities USN-458-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for samba vulnerabilities USN-419-1

Ubuntu Update for Linux kernel vulnerabilities USN-419-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4191.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba vulnerabilities USN-419-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1

Ubuntu Update for Linux kernel vulnerabilities USN-574-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5741.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Cisco会话边界控制器远程拒绝服务漏洞

BUGTRAQ ID: 33975 CVECAN ID: CVE-2009-0619 会话边界控制器（SBC）是位于网络边界的多媒体设备，控制到该网络的呼叫准入。 Cisco SBC中存在漏洞，未经认证的攻击者可以通过在2000端口上发送特制的TCP报文导致Cisco SBC卡重载。反复攻击可导致持续的拒绝服务情况。 Cisco Session Border Controller 3.01 临时解决方法： 在RP的信令/媒体VLAN配置ACL。以下示例显示如何将VLAN 140配置为信令/媒体VLAN。 Cisco SBC配置 interface vlan 140 ip address...

wireshark: DoS (app crash or abort) in Bluetooth ACL dissector via a packet with an invalid length

The dissectbtacl function in packet-bthciacl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via a packet with an invalid length, related to an erroneous tvbmemcpy call...

Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)

Dear BugTraq Readers, It is possible to download the configuration containing usernames/passwords to this CCTV DVR which is being marketed by Swann Security suspect that it is a rebranded AVTech unit tez@tetris $ curl http://192.168.2.100/../../var/run/vynetman.cfg snipPadmin111111 the above are...

Swann Security CCTV DVR Disclosure

Dear BugTraq Readers, It is possible to download the configuration containing usernames/passwords to this CCTV DVR which is being marketed by Swann Security suspect that it is a rebranded AVTech unit tez@tetris $ curl http://192.168.2.100/../../var/run/vynetman.cfg Padmin111111 the above are the...

dovecot security and bug fix update

1.0.7-7 - permissions of deliver and dovecot.conf from 1.0.7-5 reverted - password can be stored in different file readable only for root now - Resolves: 436287, CVE-2008-4870 1.0.7-6 - added missing directory in file list - Resolves: 436287 1.0.7-5 - change permissions of deliver and dovecot.con...