net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | 1.0.0 Build 20201208 Rel. 40304 |