net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
Exploitability
AV:LAC:LAu:NImpact
C:NI:PA:N2.1/AV:L/AC:L/Au:N/C:N/I:P/A:N