6139 matches found
UBUNTU-CVE-2012-0038
Integer overflow in the xfsaclfromdisk function in fs/xfs/xfsacl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service panic via a filesystem with a malformed ACL, leading to a heap-based buffer overflow...
PT-2012-2256 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1.9 Description: The issue is caused by an integer overflow in the xfs acl from disk function, which can lead to a heap-based buffer overflow when a local user interacts with a filesystem containing a malforme...
Cisco Nexus switches protection bypass
It's possible to bypass ACL limitation. Local code execution...
OpenSSH < 3.2.3 YP Netgroups Authentication Bypass
According to its banner, the version of OpenSSH running on the remote host is older than 3.2.3. It therefore may be affected by an authentication bypass issue. On systems using YP with netgroups, sshd authenticates users via ACL by checking for the requested username and password. Under certain...
CentOS 5 : rsync (CESA-2011:0999)
An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
CVE-2011-2581
The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...
Design/Logic Flaw
The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...
CVE-2011-2581
The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...
CVE-2011-2581
Cisco Nexus NX-OS ACL bypass (CVE-2011-2581) affects Nexus 5000 and 3000 series: placing a remark before a deny in an ACL can allow bypass of access restrictions, enabling remote packet flow in opportunistic scenarios. Root cause: improper handling of comments when paired with deny statements. Af...
PT-2011-3936
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 5.02 through 5.03 before 5.03N21 on Nexus 5000 series switches Cisco NX-OS versions prior to 5.03U12a on Nexus 3000 series switches Description The issue arises from the ACL implementation not properly handling comments in...
CVE-2011-2581: Undefined Security Weakness
The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...
Asterisk Peer IAX2 Call Handling ACL Rule Bypass (AST-2012-013)
Binary data 6568.prm...
Ubuntu 10.10 : linux vulnerabilities (USN-1183-1)
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Neil Horman discovered that NFSv4 did not correctly handle...
USN-1183-1: Linux kernel vulnerabilities
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Neil Horman discovered that NFSv4 did not correctly handle...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1168-1)
Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges. CVE-2011-1017 Neil Horman discovered that NFSv4 did not correctly handle certain orde...
CVE-2011-2760
Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet...
Authentication flaw
Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet...
CVE-2011-2760
Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet...
CVE-2011-2760
Brocade BigIron RX switches are affected: an attacker could bypass access control lists by crafting a packet with 179 as the source port, enabling remote bypass of ACL rules. The provided sources describe the vulnerability as a source-port-based bypass but do not specify a fixed patch/version or ...