CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0865

Cisco 12000 Series Routers (IOS 12.0) with Engine 2 line cards are affected by CVE-2001-0865. The issue is that the outgoing ACL implementation does not support the fragment keyword, potentially allowing fragmented packets to bypass the ACL as configured (violation of intended access). The descri...

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-0862

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The flaw permits non‑initial IP fragments to bypass ACLs, enabling a remote attacker to bypass firewall rules. The issue is tied to how fragment handling is treated in ACLs, leading to incomplete filtering. Affecte...

CVE-2001-0864

Cisco 12000 Series routers with IOS 12.0 and Engine 2 line cards have an ACL boundary bug: when an outgoing ACL contains exactly 448 entries, the implicit/deny rule may be bypassed for some outbound packets. Affected component: outgoing ACL processing on Engine 2-based line cards; impact: potenti...

CVE-2001-0863

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are vulnerable in Turbo ACL handling; the compiled ACL may ignore the fragment keyword for packets to the router, enabling remote denial of service via a flood of fragments. Affected component: fragmented traffic in ACLs. Impact...

CVE-2001-0862

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

Allaire JRun ACL bypassing/soure disclosure vulnerability

In-Reply-To: 009a01c1792a$d8a23160$0205a8c0@athlon hi, just an add on for the Jrun indexing vulnerability, the same 3f.jsp trick allows to view server scripts sources by using : GET /scripts.asp3f.jsp HTTP/1.0 and can be used to bypass IIS directories ACLs too while indexing the content and/or...

Lotus Domino View ACL by-pass (#NISR29102001C)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...

PT-2001-2296 · Unknown · Tcp Wrappers

Name of the Vulnerable Software and Affected Versions: tcp wrappers versions 4.1.1 through 4.3 Description: The issue concerns the improper checking of the result of a reverse DNS lookup in tcp wrappers when the PARANOID ACL option is enabled. This could allow remote attackers to bypass intended...

Squid httpd acceleration acl bug enables portscanning

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory: NASR-2001-001 [email protected] Date: 18 July 2001 Summary: Squid can be used to proxy and also portscan if set up as a httpd accelerator reverse proxy. Versions Affected: 2.3STABLE3 and 2.3STABLE4 unpatched This includes the RedHa...

CVE-2000-1174

CVE-2000-1174 affects Ethereal (now Wireshark) up to version 0.8.13 and earlier, where multiple buffer overflows in the AFS ACL parser allow remote attackers to execute arbitrary commands by sending a crafted packet with a long username. The flaw is in the parser’s handling of AFS ACL data, enabl...

CVE-2000-1174

Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username...

CVE-2000-1174

Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username...

tcpdump 3.43.5 - AFS ACL Packet Buffer Overflow

tcpdump 3.43.5 - AFS ACL Packet Buffer Overflow / source: https://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from...

tcpdump 3.4/3.5 - AFS ACL Packet Buffer Overflow

/ source: https://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from the link layer interface through pcap. It is...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

Серьезная локальная DoS-атака против *BSD

Недокументированный системный вызов, используемый в ipcs, неиспользующий проверку ACL позволяет любому пользователю заблокировать выход приложений...

Cartfix Secret Backdoor Patch tool for cart32

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...