CVE-2005-2729

The CVE-2005-2729 entry describes a vulnerability in the HTTP proxy of Astaro Security Linux 6.0 where HTTP CONNECT requests to localhost are not properly filtered, allowing remote attackers to bypass firewall rules and access local services. The issue is a network‑level exposure with low attack ...

CVE-2005-2729

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services...

CVE-2005-2729: Undefined Security Weakness

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services...

CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...

DEBIAN-CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...

CVE-2002-2063

AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames...

CVE-2002-2063: Undefined Security Weakness

AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames...

CVE-2004-2176

The CVE-2004-2176 entry concerns the Internet Connection Firewall (ICF) in Windows XP SP2. The issue arises because ICF is configured by default to trust sessmgr.exe, enabling local users to use sessmgr.exe to open a local listening port that bypasses ICF access controls. Documents do not provide...

CVE-2005-2088

The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Lengt...

CVE-2005-2094

Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward...

CVE-2005-2094: Undefined Security Weakness

Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward...

CVE-2005-2093: Undefined Security Weakness

Oracle 9i Application Server Oracle9iAS 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Application Server to...

CVE-2005-1646: Undefined Security Weakness

The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...

NETFile FTP/Web Server FTP Bounce Attack

The NETFile FTP/Web server on the remote host is vulnerable to a denial of service attack due to its support of the FXP protocol and its failure to validate the IP address supplied in a PORT command. Additionally, this issue can be leveraged to bypass firewall rules to connect to arbitrary hosts....

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

security flaw

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

security flaw

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0449: Improper Input Validation

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

USN-82-1: Linux kernel vulnerabilities

CAN-2004-0176: Michael Kerrisk noticed an insufficient permission checking in the shmctl function. Any process was permitted to lock/unlock any System V shared memory segment that fell within the the RLIMITMEMLOCK limit that is the maximum size of shared memory that unprivileged users can acquire...