CVE-2008-2059

Cisco ASA/PIX security appliances with software version 8.0.x before 8.0(3)9 are vulnerable to CVE-2008-2059, a control-plane ACL bypass vulnerability. The advisory describes multiple independent issues and, for this CVE, enabling bypass via unknown vectors could allow malicious traffic to reach ...

Code injection

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

CVE-2008-1937

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

CVE-2008-1937

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

CVE-2008-1937

Removed by vendor...

CVE-2008-1937

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

CVE-2008-1937

CVE-2008-1937 affects MoinMoin: the userform.py processing in versions prior to 1.6.3 fails to properly manage users when ACLs or a non-empty superuser list are used, enabling remote privilege escalation. The issue is tied to the user management logic in the form handling code, not a general prod...

Fedora 7 : rsync-2.6.9-6.fc7 (2008-3060)

Tue Apr 8 2008 Simo Sorce 2.6.9-6.fc7 - Security release: http://rsync.samba.org/security.htmls302 - Wed Sep 5 2007 Simo Sorce 2.6.9-3.fc7 - Add patch to fix crash bug with hardlinks and ACLs patches Note that Tenable Network Security has extracted the preceding description block directly from...

Ubuntu 7.04 / 7.10 : rsync vulnerability (USN-600-1)

Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash. Note that Tenable Network Security has extracted the preceding description block directly...

GLSA-200803-27 : MoinMoin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-27 MoinMoin: Multiple vulnerabilities Multiple vulnerabilities have been discovered: A vulnerability exists in the file wikimacro.py because the macroGetval function does not properly enforce ACLs CVE-2008-1099. A directory...

Code injection

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...

CVE-2008-1099

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...

CVE-2008-1099

CVE-2008-1099 affects MoinMoin

[CSNC] OKI C5510MFP Printer Password Disclosure

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OKI C5510MFP Printer Vendor: OKI Printing Solutions http://www.okiprintingsolutions.com/ Subject: Printer Reveals Password / Password and the configuration can be altered without authentication Risk: High Effect: Remotely exploitable Author:...

Debian Security Advisory DSA 721-1 (squid)

The remote host is missing an update to squid announced via advisory DSA 721-1. OpenVAS Vulnerability Test $Id: deb7211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 721-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-721-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-558-1: Linux kernel vulnerabilities

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Certain calculatio...

Fedora 8 : squid-2.6.STABLE17-1.fc8 (2007-4170)

Thu Dec 6 2007 Martin Nagy - 2.6.STABLE17-1 - upgrade to latest upstream 2.6.STABLE17 - Mon Nov 12 2007 Martin Bacovsky - 7:2.6.STABLE16-3 - squid is compiled wirh arp acls support --enable-arp-acl Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2007-6048: Undefined Security Weakness

IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security-related...

Mandrake Linux Security Advisory : bind (MDKSA-2007:149)

The DNS query id generation code in BIND9 is vulnerable to cryptographic analysis which provides a 1-in-8 change of guessing the next query ID for 50% of the query IDs, which could be used by a remote attacker to perform cache poisoning by an attacker CVE-2007-2926. As well, in BIND9 9.4.x, the...