CVE-2008-4577

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

Security feature bypass

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

Design/Logic Flaw

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4577

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4577

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4577

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4578

CVE-2008-4578 affects Dovecot via the ACL plugin: the k-right can bypass access restrictions to create unauthorized parent/child mailboxes. The issue is part of a set of Dovecot vulnerabilities described in GLSA 200812-16 and MDVSA-2008:232, with remediation by upgrading Dovecot to a newer versio...

CVE-2008-4577

CVE-2008-4577 affects Dovecot; the ACL plug-in incorrectly treats negative access rights as positive, allowing bypass of access restrictions. The issue concerns Dovecot versions prior to 1.1.4 (per initial description). Various connected advisories note this vulnerability alongside CVE-2008-4870,...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

CVE-2008-4577

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

PT-2008-5795 · Dovecot +1 · Dovecot +1

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 1.1.4 Description: The issue allows attackers to bypass intended access restrictions due to the ACL plugin treating negative access rights as if they are positive access rights. Recommendations: For versions prior to...

kernel: nfsd: fix buffer overrun decoding NFSv4 acl

Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl...

dovecot -- ACL plugin bypass vulnerabilities

Timo Sirainen reports in dovecot 1.1.4 release notes: ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

Null pointer dereference

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-4160

CVE-2008-4160 affects the UFS module in Solaris 8–10 and OpenSolaris. The vulnerability is a local denial of service caused by a NULL pointer dereference in the Solaris ACL implementation, leading to a kernel panic. Connected advisories reference Solaris patch updates: 139483-05 (SunOS 5.10 SPARC...

Linux kernel NFSv4 ACL缓冲区溢出漏洞

BUGTRAQ ID: 31133 CVE ID：CVE-2008-3915 CNCVE ID：CNCVE-20083915 Linux是一款开放源代码的操作系统。 当NFSv4启用时Linux内核中的NFSD存在一个缓冲区溢出，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可能导致任意代码执行。 问题存在于对NFSv4 ACL解码处理中，initstate函数分配数组时不足够大，构建特殊的NFSv4 acl可触发缓冲区溢出。 Linux kernel 2.6.26 3 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .9 Linux kerne...