Cisco Gigabit Switch Routers (GSR) Line Card Failure ACL Bypas (CSCdp35794)

A defect in Cisco IOS Software running on all models of Gigabit Switch Routers GSRs configured with Gigabit Ethernet or Fast Ethernet cards may cause packets to be forwarded without correctly evaluating configured access control lists ACLs. In addition to circumventing the access control lists, i...

CVE-2001-0864

Cisco 12000 Series routers with IOS 12.0 and Engine 2 line cards have an ACL boundary bug: when an outgoing ACL contains exactly 448 entries, the implicit/deny rule may be bypassed for some outbound packets. Affected component: outgoing ACL processing on Engine 2-based line cards; impact: potenti...

CVE-2001-0862

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The flaw permits non‑initial IP fragments to bypass ACLs, enabling a remote attacker to bypass firewall rules. The issue is tied to how fragment handling is treated in ACLs, leading to incomplete filtering. Affecte...

CVE-2001-0865

Cisco 12000 Series Routers (IOS 12.0) with Engine 2 line cards are affected by CVE-2001-0865. The issue is that the outgoing ACL implementation does not support the fragment keyword, potentially allowing fragmented packets to bypass the ACL as configured (violation of intended access). The descri...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-0862

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...

CVE-2001-0863

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are vulnerable in Turbo ACL handling; the compiled ACL may ignore the fragment keyword for packets to the router, enabling remote denial of service via a flood of fragments. Affected component: fragmented traffic in ACLs. Impact...

CVE-2001-0863: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...

CVE-2001-0867: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls...

CVE-2001-0862: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...

CVE-2001-0864: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-0865: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...

CVE-2001-0866: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

Allaire JRun ACL bypassing/soure disclosure vulnerability

In-Reply-To: 009a01c1792a$d8a23160$0205a8c0@athlon hi, just an add on for the Jrun indexing vulnerability, the same 3f.jsp trick allows to view server scripts sources by using : GET /scripts.asp3f.jsp HTTP/1.0 and can be used to bypass IIS directories ACLs too while indexing the content and/or...

Lotus Domino View ACL by-pass (#NISR29102001C)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...

CVE-1999-1465: Undefined Security Weakness

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching DFS enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug...

CVE-1999-1464: Undefined Security Weakness

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching DFS enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk3556...

CVE-1999-1273: Undefined Security Weakness

Squid Internet Object Cache 1.1.20 allows users to bypass access control lists ACLs by encoding the URL with hexadecimal escape sequences...