|
|
Info |
Last Modified |
| 11 days ago |
|
|
|
|
Description |
The BIG-IP platform contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to checktrap.pl not properly sanitizing input from syslog before using it to construct a shell command. It is possible that the flaw may allow an attacker to gain control of the system resulting in a loss of integrity. This issue does not affect "default" installations.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Rumored / Private
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 4.6.2 or 4.5.11 or higher, as these versions have been reported to fix this vulnerability. In addition, F5 Networks has released a patch for some older versions. Versions 4.5 through 4.5 PTF-05 and versions prior to 4.2 are vulnerable but no patch is available.
|
|
Products |
|
BIG-IP
 |
4.6.1 |
4.5.10 |
4.2 PTF-10 |
|
|
|
|
Credit |
- Gerard Eviston - eviston
 pobox.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
