CVE-2001-1500

ProFTPD 1.2.2rc2 (and possibly other versions) is affected by a DNS validation issue where reverse-resolved hostnames are not properly verified via forward resolution. This can allow remote attackers to bypass access control lists or log an incorrect client hostname. The available connected docum...

CVE-2005-1720

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...

CVE-2005-1720

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...

CVE-2005-1720

CVE-2005-1720 affects AFP Server for Mac OS X 10.4.1 when an ACL-enabled volume copies a file into a directory that does not use ACLs. The issue is that the server does not properly remove the ACL, causing it to override the directory’s POSIX permissions for that ACL. Originating description appe...

Cisco Firewall Services Module filtering protection bypass

It's possible to bypass ACL...

Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== FWSM URL Filtering Solution TCP ACL Bypass Vulnerability ======================================================== Document ID: 64821 Revision 1.0 For Public Release 2005 May 11 1600 UTC GMT -...

FWSM URL Filtering Solution TCP ACL Bypass Vulnerability

...

CVE-2005-1517

The Cisco Firewall Services Module (FWSM) 2.3.1 and earlier is affected by a vulnerability where TCP packets can bypass access control lists (ACLs) when URL, FTP, or HTTPS filtering exceptions are used. This is documented in CVE-2005-1517 and referenced in Cisco’s security advisory and NVD record...

CVE-2001-1477

The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain...

CVE-2003-1133

CVE-2003-1133 affects Rit Research Labs The Bat! versions 1.0.11–2.0. The root cause is insecure ACLs used when creating new accounts, allowing local attackers to read other users’ email messages. The vulnerability is local and limited by the product’s access controls. KB/related advisories from ...

[SECURITY] [DSA 721-1] New squid packages fix ACL bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 721-1 [email protected] http://www.debian.org/security/ Martin Schulze May 6th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 721-1] New squid packages fix ACL bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 721-1 [email protected] http://www.debian.org/security/ Martin Schulze May 6th, 2005 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : squid (MDKSA-2005:078)

Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...

CVE-2005-1345

Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...

CVE-2005-1345

CVE-2005-1345 affects Squid up to version 2.5.STABLE9, where missing or invalid http_access ACLs do not trigger a fatal error, potentially allowing broader access than intended. The initial description explicitly notes the ACL error in Squid’s http_access handling. Connected advisories identify a...

[Full-disclosure] iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability

McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability iDEFENSE Security Advisory 04.18.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 18, 2005 I. BACKGROUND McAfee Internet Security Suite 2005 is a product used to protect a personal computer fro...

CVE-2005-1107

McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files...

[Full-disclosure] BakBone products multiple vulnerabilities

The Hat-Squad has found 2 exploitable vulnerabilities affecting BakBone NetVault Backup Software 6.x/7.x At this moment writing this advisory, no decent communications were established with the BakBone technicians, we recommand to set strict ACL rules on the files configure.cfg and to filter all...

[Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities

Hat-Squad Advisory: BakBone NetVault Remote Heap and Local Buffer Overflow April 1, 2005 Product: BakBone NetVault Vendor URL: http://www.bakbone.com Version: NetVault 7.x, 6.x Vulnerability: Remote and Local Heap Buffer overflows Release Date:1 April 2005 Vendor Status: 17-3-2005: vendor notifie...

GLSA-200501-25 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-25 Squid: Multiple vulnerabilities Squid contains a vulnerability in the gopherToHTML function CAN-2005-0094 and incorrectly checks the 'number of caches' field when parsing WCCPISEEYOU messages CAN-2005-0095. Furthermore t...