CVE-2008-3424
Chain: product does not properly handle wildcards in an authorization policy list, allowing unintended access.
CVE-2005-1036
Chain: Bypass of access restrictions due to improper authorization (CWE-862) of a user results from an improperly initialized (CWE-909) I/O permission bitmap