Design/Logic Flaw

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

CVE-2007-2637

CVE-2007-2637 affects MoinMoin prior to 20070507, where ACLs for calendars and includes were not properly enforced, potentially allowing remote attackers to read restricted pages. The issue is due to insufficient ACL enforcement in the MoinMoin software, leading to information disclosure via unsp...

CVE-2007-2637

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

CVE-2007-2637

Removed by vendor...

Cisco Wireless LAN Controller multiple security vulnerabilities

Default SNMP communities, default passwords, DoS on Ethrenet frames parsing, multiple NPU DoS conditions, WLAN ACLs are lost during reboot...

TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit

No description provided by source. / Exploit: TIBCO RendezVous local password extractor version =7.4.11 Affected products: Tibco RendezOVous version =7.4.11 Author: Andres Tarasco Acua atarasco @ sia.es Advisory: http://www.514.es Status: Vendor notifification Timeline: ---------------- Discovere...

CVE-2006-4650

Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers...

CVE-2006-4650

Cisco IOS 12.0/12.1/12.2 GRE decapsulation vulnerability: missing RFC2784 fixes allow GRE offset overflow during decapsulation, enabling remote crafted packets to enter the routing queue and potentially bypass ACLs. Affected component is GRE IP tunneling handling; root cause is failure to verify ...

CVE-2006-4650

Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers...

[Full-disclosure] RE: Cisco IOS GRE issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 06, 2006 at http://www.securityfocus.com/archive/1/445322/30/0/threaded, and entitled "Cisco Systems IOS GRE decapsulation fault". An official response ...

TIBCO Rendezvous 7.4.11 - Password Extractor

TIBCO Rendezvous 7.4.11 - Password Extractor / Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64valc : -1...

TIBCO Rendezvous 7.4.11 - Password Extractor

/ Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64val...

Local privilege Escalation in SmartLine DeviceLock 5.73

The vulnerability constitutes of wrong ACLs on Device Object permission set by the driver. Whenever your ACLs on a harddrive or partition, as configured by DeviceLock Manager, only consists of Allow entries and Deny being the default, then the driver sets the ACLs on the kernel's internal object...

[Full-disclosure] Cisco Secure ACS Weak Session Management Vulnerability

Cisco Secure ACS Weak Session Management Vulnerability June 23, 2006 Product Overview: Cisco Secure Access Control Server ACS provides a centralized identity networking solution and simplified user management experience across all Cisco devices and security management applications. Cisco Secure A...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Microsoft Windows - ACLs Privilege Escalation (2)

/ Privilege Scalation for Windows Networks using weak Service restrictions v2.0 c 2006 Andres Tarasco Acuña atarasco at gmail.com Date: February 6, 2006 - http://www.haxorcitos.com http://microsoft.com/technet/security/advisory/914457.mspx --------------------------------------- LIST OF WELL KNO...

Default credentials

Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...

CVE-2006-0023

Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...

CVE-2006-0023

Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...

Ubuntu 4.10 : squid vulnerabilities (USN-84-1)

When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...