CVE-2004-1023: Undefined Security Weakness

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

BSD bmon 1.2.1_2 - Local acls Bypass

!/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat...

Debian DSA-474-1 : squid - ACL bypass

A vulnerability was discovered in squid, an Internet object cache, whereby access control lists based on URLs could be bypassed CAN-2004-0189. Two other bugs were also fixed with patches squid-2.4.STABLE7-urlescape.patch a buffer overrun which does not appear to be exploitable and...

Cisco IOS ACL Bypass (Bug ID CSCdi34061)

Binary data 2197.prm...

Cisco IOS ACL Bypass (Bug ID CSCdi36962)

Binary data 2199.prm...

Cisco VPN Concentrator ACL Bypass / DoS (Bug ID CSCdx07754, CSCdx24622, CSCdx24632)

Binary data 2231.prm...

Cisco IOS ACL Bypass (Bug ID CSCdi34061)

Binary data 2196.prm...

Cisco IOS ACL Bypass (Bug ID CSCdi36962)

Binary data 2200.prm...

Cisco IOS ACL Bypass (Bug ID CSCdi34061)

Binary data 2195.prm...

Cisco VPN Concentrator ACL Bypass / DoS (Bug ID CSCdx07754, CSCdx24622, CSCdx24632)

Binary data 2232.prm...

Cisco VPN Concentrator ACL Bypass / DoS (Bug ID CSCdx07754, CSCdx24622, CSCdx24632)

Binary data 2233.prm...

CVE-2004-0189: Undefined Security Weakness

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL "%00" character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists...

GLSA-200408-25 : MoinMoin: Group ACL bypass

The remote host is affected by the vulnerability described in GLSA-200408-25 MoinMoin: Group ACL bypass MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous...

GLSA-200407-09 : MoinMoin: Group ACL bypass

The remote host is affected by the vulnerability described in GLSA-200407-09 MoinMoin: Group ACL bypass MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact : I...

FreeBSD : moinmoin -- ACL group bypass (115)

The following package needs to be updated: moinmoin %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg1ecf4ca1f7ad11d896c900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

OpenSSH < 2.9.9 Multiple Key Type ACL Bypass

Binary data 1988.prm...

Squid < 2.5.STABLE5 %xx URL Encoding ACL Bypass

Binary data 1212.prm...

CVE-2004-0432

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions...

Mandrake Linux Security Advisory : proftpd (MDKSA-2004:041)

A portability workaround that was applied in version 1.2.9 of the ProFTPD FTP server caused CIDR based ACL entries in 'Allow' and 'Deny' directives to act like an 'AllowAll' directive. This granted FTP clients access to files and directories that the server configuration may have been explicitly...

SUSE-SA:2002:036: mod_php4

The remote host is missing the patch for the advisory SUSE-SA:2002:036 modphp4. PHP is a well known and widely used web programming language. If a PHP script runs in 'safe mode' several restrictions are applied to it including limits on execution of external programs. An attacker can pass shell...