Mandrake Linux Security Advisory : proftpd (MDKSA-2004:041)

A portability workaround that was applied in version 1.2.9 of the ProFTPD FTP server caused CIDR based ACL entries in 'Allow' and 'Deny' directives to act like an 'AllowAll' directive. This granted FTP clients access to files and directories that the server configuration may have been explicitly...

SUSE-SA:2002:036: mod_php4

The remote host is missing the patch for the advisory SUSE-SA:2002:036 modphp4. PHP is a well known and widely used web programming language. If a PHP script runs in 'safe mode' several restrictions are applied to it including limits on execution of external programs. An attacker can pass shell...

moinmoin -- ACL group bypass

The moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not...

MoinMoin: Group ACL bypass

Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact If an administrative grou...

FreeBSD : squid ACL bypass due to URL decoding bug (182)

The following package needs to be updated: squid %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg705e003a7f3611d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

[SECURITY] [DSA 474-1] New squid packages fix ACL bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 474-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

squid URL ACL protection bypass

By escaping URL characters it's possible to bypass URL filtering...

Old IOS versions ACL protection bypass

Packets with RST+ACK flags are not filtered...

squid ACL bypass due to URL decoding bug

From the Squid advisory: Squid versions 2.5.STABLE4 and earlier contain a bug in the "%xx" URL decoding function. It may insert a NUL character into decoded URLs, which may allow users to bypass urlregex ACLs...

KLA10362 OSI vulnerability in The Bat

An insecure ACL was found in The Bat! By exploiting this vulnerability malicious users can read e-mail messages. This vulnerability can be exploited locally. Original advisories - Related products The-Bat! CVE list CVE-2003-1133 warning Solution Update to latest version Impacts OSI Obtain sensiti...

Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure

source: https://www.securityfocus.com/bid/8920/info It has been reported that Centrinity FirstClass HTTP server may be prone to an information disclosure vulnerability that may allow a remote attacker to disclose listings for server root and user web directories on a vulnerable system. This issue...

AdSubtract Proxy protection bypass

Any host with 127.0.0.1 in PTR record can bypass any ACL limitations...

AdSubtract Proxy ACL Bypass Vulnerability

AdSubtract Proxy ACL Bypass Vulnerability URL http://www.lurhq.com/advisory20030604.html Release Date June 4, 2003 Author Joe Stewart About AdSubtract AdSubtract is one of the leading products in the banner-ad blocking software market. It is frequently bundled with modems from several leading...

ICQLite executable trojaning

bugtraq@, Title: ICQ Lite executable trojaning Affected: ICQLite 2003a Vendor: ICQ Inc Vendor URL: http://www.icq.com Risk: Average Exploitable: Yes Remote: No Date: May, 29 2003 Advisory URL: http://www.security.nnov.ru/advisories/icqlite.asp I. Intro: ICQ Lite is popular internet messenger...

WinXP Pro(Gold) Insecure System Restore File Permissions

WinXP ProGold Insecure System Restore File Permissions On the Windows XP ProfessionalGold, the "System Restore" files are not protected properly by NTFS ACL, so every local user can access these important files. System Restore files are stored in the "System Volume Information" directory, and thi...

CVE-2001-1030

CVE-2001-1030 affects the Squid proxy server when used in HTTP accelerator mode. The vulnerability exists if httpd_accel_host and http_accel_with_proxy are off, enabling an attacker to bypass ACLs and perform unauthorized activities such as port scanning. Concrete details from connected sources i...

Cisco IOS established Keyword ACL Bypass (CSCdi34061)

The remote device seems to be vulnerable to a flaw in IOS when the keyword 'established' is being used in the ACLs. This bug can, under very specific circumstances and only with certain IP host implementations, allow unauthorized packets to circumvent a filtering router. This vulnerability is...

Cisco IOS tacacs Keyword ACL Bypass (CSCdi36962)

The remote device seems to be vulnerable to a flaw in IOS when the keyword 'tacacs-ds' or 'tacacs' is being used in extended ACLs. This bug can, under very specific circumstances and only with certain IP host implementations, allow unauthorized packets to circumvent a filtering router. This...

Cisco Gigabit Switch Routers (GSR) Line Card Failure ACL Bypas (CSCdp35794)

A defect in Cisco IOS Software running on all models of Gigabit Switch Routers GSRs configured with Gigabit Ethernet or Fast Ethernet cards may cause packets to be forwarded without correctly evaluating configured access control lists ACLs. In addition to circumventing the access control lists, i...

Cisco IOS Firewall CBAC ACL Bypass (CSCdv48261)

The IOS Firewall Feature set, also known as Cisco Secure Integrated Software, also known as Context Based Access Control CBAC, and introduced in IOS version 11.2P, has a vulnerability that permits traffic normally expected to be denied by the dynamic access control lists. An attacker may use this...