Cve pending...
CVE-2010-0007 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0007): net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.