CVE-2002-2323

CVE-2002-2323 affects Sun PC NetLink 1.0–1.2. The issue is an improper setting of ACLs for files/directories that use symbolic links and have been restored from backup, potentially allowing bypass of access restrictions for local or remote attackers. Connected advisories (Red Hat, PT Security) re...

CVE-2002-2323

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list ACL for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions...

CVE-2002-2324

The CVE-2002-2324 entry concerns Windows XP Professional, where the System Restore directory and possibly other subdirectories within System Volume Information have insecure ACL permissions. The underlying issue is insufficient access controls, allowing local users to access restricted files and ...

CVE-2002-2324

The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list ACL permissions, which allows local users to access restricted files and modify registry settings...

CVE-2007-5571

Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...

Design/Logic Flaw

Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...

CVE-2007-5571

Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...

CVE-2007-5571

Cisco Firewall Services Module (FWSM) 3.1(6) and 3.2(2) and earlier does not properly enforce edited ACLs, potentially allowing remote attackers to bypass network traffic restrictions. Affected component: ACL enforcement in FWSM. Root cause: misimplementation of edited ACL handling leading to byp...

openSUSE 10 Security Update : kernel (kernel-2635)

This kernel update fixes the following security problems : - CVE-2006-2936: The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to...

MDKA-2007:090 : bind

A number of bugs in the BIND9 packages are fixed in this update: Threading was disabled in the ISC BIND package shipped with Mandriva Linux 2007 and Corporate Server 4, because the host command did not work properly with threading enabled. This update only builds the host command without threadin...

Design/Logic Flaw

JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...

CVE-2007-4849

JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...

CVE-2007-4849

JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...

CVE-2007-4849

The CVE-2007-4849 entry concerns JFFS2 on OLPC build 542 (and possibly other Linux systems) when POSIX ACL support is enabled. It describes a flaw where permissions may not be stored correctly during inode creation or ACL setting, caused by an inconsistency between dentry permissions and inode pe...

CVE-2007-4849

JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...

CentOS 3 / 4 / 5 : star (CESA-2007:0873)

An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...

RHEL 3 / 4 / 5 : star (RHSA-2007:0873)

An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...

[SECURITY] Fedora 7 Update: star-1.5a84-2.fc7

Star saves many files together into a single tape or disk archive, and can restore individual files from the archive. Star supports ACL...

ZoneAlarm产品多个本地权限提升漏洞

BUGTRAQ ID: 25365 CVECAN ID: CVE-2007-4216,CVE-2005-2932 ZoneAlarm是一款个人电脑防火墙，能保护个人数据和隐私安全。 ZoneAlarm的实现和安装上存在多个安全漏洞，本地攻击者可能利用此漏洞提升自己的权限。 ZoneAlarm产品vsdatant.sys设备驱动的IOCTL处理代码没有验证传送给IOCTL 0x8400000F和IOCTL...

iDefense Security Advisory 08.20.07: Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability

Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-ware...