Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability

Cisco Secure Access Control System ACS contains a vulnerability that could allow an unauthenticated, remote attacker to bypass TACACS+ based authentication services offered by the affected application. The vulnerability is due to improper validation of user-supplied input processed by the affecte...

Design/Logic Flaw

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file...

CVE-2012-4845

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file...

Solaris 9 (sparc) : 115336-06

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: RBAC Configuration. Supported versions that are affected are 8, 9 and 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional, multiple logins to components...

Solaris 9 (x86) : 115337-05

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: RBAC Configuration. Supported versions that are affected are 8, 9 and 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional, multiple logins to components...

HP-UX Update for Role-Based Access Control (RBAC) HPSBUX02457

Check for the Version of Role-Based Access Control RBAC OpenVAS Vulnerability Test HP-UX Update for Role-Based Access Control RBAC HPSBUX02457 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

HP-UX PHCO_40131 : HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access (HPSBUX02457 SSRT090174 rev.1)

s700800 11.31 rbac cumulative patch : A potential security vulnerability has been identified with HP-UX running Role-Based Access Control RBAC. The vulnerability could be exploited locally to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Code injection

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-2682

Unspecified vulnerability in Role-Based Access Control RBAC in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2009-3390

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-2682

Unspecified vulnerability in Role-Based Access Control RBAC in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2009-2682

CVE-2009-2682 describes an unspecified local vulnerability in HP-UX RBAC that could let a local user bypass access restrictions on HP-UX B.11.23 and B.11.31. Related OpenVAS/NVD entries confirm HP-UX RBAC components (RBAC-CONF, RBAC-RUN, RBAC-WEB) as affected, with the HP Security Bulletin HPSBUX...

CVE-2009-3390

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

[security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01866178 Version: 1 HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control RBAC, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon a...

CVE-2009-2430

Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv01 through snv58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors...

Code injection

Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv01 through snv58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors...

CVE-2009-2430

Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv01 through snv58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors...

CVE-2009-2430

CVE-2009-2430 affects Sun Solaris 8, 9, 10 and OpenSolaris snv_01–snv_58 when Solaris Auditing is enabled. The vulnerability, described as an unspecified local privilege escalation in auditconfig exploitable by RBAC-enabled users, uses unknown attack vectors. Connected sources reference Solaris a...

Sun Solaris 'auditconfig(1M)'命令本地特权提升漏洞

Bugraq ID: 35501 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的auditconfig存在错误，如果Solaris审核系统启用，并且用户有指派的RBAC可执行配置文件，可允许以高特权执行任意命令。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv58 Sun OpenSolaris build snv57 Sun...

Solaris Update for RBAC Feature 110400-04

Check for the Version of RBAC Feature OpenVAS Vulnerability Test Solaris Update for RBAC Feature 110400-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...