CVE-2008-4577
ACL-based protection mechanism treats negative access rights as if they are positive, allowing bypass of intended restrictions.
CVE-2007-2925
Default ACL list for a DNS server does not set certain ACLs, allowing unauthorized DNS queries.