CVE-2007-2882

CVE-2007-2882 concerns an unspecified vulnerability in the NFS client module of Sun Solaris versions 8–10 prior to the 20070524 build when the system acts as an NFS server. The issue can allow remote attackers to cause a denial of service (crash) by sending certain ACL packets. Connected advisori...

Sun Solaris NFS客户端模块ACL(2)报文拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS客户端模块相关处理acl2报文存在安全问题，远程攻击者可以利用漏洞对NFS服务器进行拒绝服务攻击。 目前没有详细漏洞细节提供 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-26-102911-1&searchclause=...

CVE-2007-2815

CVE-2007-2815 concerns Microsoft IIS webhits.dll Hit-Highlighting authentication bypass. The hit-highlighting feature in IIS Web Server 5.x (notably IIS 5.0/5.1) uses Windows NT ACLs, enabling remote attackers to bypass NTLM and Basic authentication and access private web directories via the CiWe...

CVE-2007-2637

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

Cisco IOS FTP Server非授权访问及拒绝服务漏洞

Cisco IOS是Cisco网络设备所使用的操作系统。 Cisco IOS所带的FTP Server处理访问请求时存在漏洞，远程攻击者可能利用此漏洞非授权访问系统文件或导致拒绝服务。 启用了IOS FTP Server功能的Cisco IOS没有正确检查用户授权，可能允许攻击者非授权读写设备文件系统中的任意文件，包括设备保存的配置，其中可能有口令或其他敏感信息；此外这种配置的Cisco IOS还可能导致在通过FTP传输文件时IOS重载。 Cisco IOS 12.4 Cisco IOS 12.3 Cisco IOS 12.2 Cisco IOS 12.1 Cisco IOS 12.0...

Integer overflow

Integer signedness error in the acl facl system call in Solaris 10 before 20070507 allows local users to cause a denial of service kernel panic and possibly gain privileges via a certain argument, related to ACESETACL...

CVE-2007-2529

CVE-2007-2529 affects Solaris 10 (before 20070507) with an integer signedness error in the acl (facl) system call. The underlying issue is a signedness bug in ACE_SETACL handling, enabling local users to trigger a denial of service (kernel panic) and potentially escalate privileges. Publicly docu...

USN-458-1: MoinMoin vulnerabilities

A flaw was discovered in MoinMoin's error reporting when using the AttachFile action. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication information for the domain where...

security flaw

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2007-2041

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

Design/Logic Flaw

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-2041

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-2041

CVE-2007-2041 affects Cisco Wireless LAN Controller (WLC) before 4.0.206.0. The WLAN ACL configuration is saved with an invalid checksum, causing WLAN ACLs to fail loading at boot and potentially allowing remote attackers to bypass intended access restrictions (Bug ID CSCse58195). The provided so...

Stack overflow

Stack-based buffer overflow in the Apple-specific Samba module SMB File Server in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL...

CVE-2007-0731

Stack-based buffer overflow in the Apple-specific Samba module SMB File Server in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL...

Linux NFS/ACL DoS

Memory corruption on nfsacl verison 2 'ACCESS' request parsing...

Mandrake Linux Security Advisory : openldap (MDKSA-2006:171)

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Improper access control

Unspecified vulnerability in Cisco Firewall Services Module FWSM before 2.34.7 and 3.x before 3.13.1 causes the access control entries ACE in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections...

CVE-2007-0968

Unspecified vulnerability in Cisco Firewall Services Module FWSM before 2.34.7 and 3.x before 3.13.1 causes the access control entries ACE in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections...

CVE-2007-0968

Unspecified vulnerability in Cisco Firewall Services Module FWSM before 2.34.7 and 3.x before 3.13.1 causes the access control entries ACE in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections...