CVE-2010-2199

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to...

tinyproxy -- ACL lists ineffective when range is configured

When including a line to allow a network of IP addresses, the access to tinyproxy 56 is actually allowed for all IP addresses...

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2040-1 (squidguard)

The remote host is missing an update to squidguard announced via advisory DSA 2040-1. OpenVAS Vulnerability Test $Id: deb20401.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2040-1 squidguard Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

MS Offers SharePoint Zero Day Workaround

Microsoft offered an interim work-around for a SharePoint bug that involved disabling access to the help system by running a pair of commands from the command prompt. The commands modify the access control list ACL, Windows’ list of file access permissions. Read the full article. Computerworld...

Linux Kernel ReiserFS file system implementation to bypass security restrictions vulnerability-vulnerability warning-the black bar safety net

Affected version: Linux kernel 2.6. x vulnerability description: The Linux Kernel is open sourceOSLinux the kernel. Linux Kernel ReiserFS file system implementation does not properly restrict. reiserfspriv Directory Access, the local user can modify the ACL or extended attributes get root access...

RedHat Update for squid RHSA-2010:0221-04

Check for the Version of squid OpenVAS Vulnerability Test RedHat Update for squid RHSA-2010:0221-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Authentication flaw

AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame...

CVE-2009-2822

AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame...

CVE-2010-1224

main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow...

MoinMoin Wiki Security Bypass Vulnerability

This host is running MoinMoin Wiki and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmoinmoinwikiaclsecbypassvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ MoinMoin Wiki ACL Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

CVE-2009-4762

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

PYSEC-2010-13

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

CVE-2009-4762

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

CVE-2009-4762

Removed by vendor...

CVE-2009-4762

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

Microsoft Warns of New IE Zero Day Attacks

A zero-day unpatched vulnerability in Microsoft’s Internet Explorer is being exploited in the wild, the company warned in an advisory issued today. On the same day it issued software fixes as part of its Patch Tuesday schedule, Microsoft released a pre-patch advisory to warn of the risk of remote...

Asterisk CIDR Notation in Access Rule Remote Security Bypass Vulnerability (AST-2010-003)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Asterisk invalid ACL processing

/0 CIDR in ACL is processed in unpredictable way...

AST-2010-003: Invalid parsing of ACL rules can compromise security

Asterisk Project Security Advisory - AST-2010-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Invalid parsing of ACL rules can compromise | | | security |...