Cisco IOS XR Software Compression ACL Bypass Vulnerability

A vulnerability in the port or address range compression feature for access control lists ACLs on Typhoon line cards in Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. The...

CVE-2014-3396

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

Design/Logic Flaw

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3396

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

PT-2014-5286

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on ASR 9000 devices affected versions not specified Description The issue is related to the improper use of compression for port-range and address-range encoding in access control lists ACLs on Typhoon line cards in Cisco ASR 9000...

CVE-2014-3396: Undefined Security Weakness

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)

Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...

jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS

Jenkins Security Advisory: Please reference CVE/URL list for details...

CVE-2014-2629

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

Design/Logic Flaw

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

CVE-2014-2629

The CVE-2014-2629 issue affects HP NonStop Safeguard Security Software G and the J/K release branches (G: H06.03–H06.28.01; J: J06.03–J06.17.01). The vulnerability arises from improper evaluation of the DISKFILE-PATTERN ACL on a program object file, allowing remote authenticated users to bypass i...

CVE-2014-2629: Undefined Security Weakness

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

PT-2014-4833

Name of the Vulnerable Software and Affected Versions HP NonStop Safeguard Security Software G versions H06.03 through H06.28.01 HP NonStop Safeguard Security Software G versions J06.03 through J06.17.01 Description The issue is related to the improper evaluation of the DISKFILE-PATTERN ACL of a...

CVE-2014-0875

Active Cloud Engine ACE in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions...

Design/Logic Flaw

Active Cloud Engine ACE in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions...

CVE-2014-0875

Active Cloud Engine ACE in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions...

CVE-2014-0875

IBM Storwize V7000 Unified ACE contains a race condition in NFS retransmissions that can bypass ACLs, affecting releases 1.3.0.0–1.4.3.x. A fix is available in 1.5.0.0 or later; upgrade to mitigate. The issue arises when ACE manages ACLs during network retransmissions and could grant unauthorized...

CVE-2014-0875: Undefined Security Weakness

Active Cloud Engine ACE in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions...

PT-2014-3912

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 Unified versions 1.3.0.0 through 1.4.3.x Description The issue allows remote attackers to bypass intended ACL restrictions under certain circumstances. This is achieved by leveraging incorrect ACL synchronization over an...

Cisco IOS IPv6 Packet ACL Restriction Bypass

According to its self-reported IOS version, the remote device is affected by a security bypass vulnerability. The flaw is due to the handling of specially crafted IPv6 packets in an unspecified scenario. A remote attacker, with a specially crafted request, could bypass the ACL restrictions on the...