CVE-2002-0170: Undefined Security Weakness

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...

remote SYSTEM compromise in WASD OpenVMS http server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in WASD http server for OpenVMS Version 1.0, 25 Sept 2002. 0. Contents 1. Summary 2. Severity: Critical 3. Vulnerable versions 4. Description 5. Solutions 6. Examples of site weaknesses 7. Conclusion 8. Acknowledgments 9...

CVE-2001-1401: Undefined Security Weakness

Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in 1 processbug.cgi, 2 showactivity.cgi, 3 showvotes.cgi, 4 showdependencytree.cgi, 5 showdependencygraph.cgi, 6...

CVE-2002-0528: Undefined Security Weakness

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0867

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls...

CVE-2001-0866

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The issue is an ACL handling flaw where an outbound ACL may not properly apply if an input ACL is not configured on all interfaces of a multi-port line card, potentially allowing remote attackers to bypass intended...

CVE-2001-0866: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-1999-1481: Undefined Security Weakness

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair...

CVE-2001-1058

The License Manager mathlm for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control specified by the -restrict argument and steal a license via a client request that includes the name of a host that is allowed to obtain the license...

CVE-2001-1058: Undefined Security Weakness

The License Manager mathlm for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control specified by the -restrict argument and steal a license via a client request that includes the name of a host that is allowed to obtain the license...

CVE-2001-1500

ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0108: Undefined Security Weakness

PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested...

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...

CVE-2001-0063: Undefined Security Weakness

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges...

CVE-2001-0063

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges...

CVE-2000-1238: Undefined Security Weakness

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / forward slash characters before the restricted pages...

CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...