Skip to main content

F5 Products Multiple Vulnerabilities

Last Update Date: 16 Jul 2013 10:52 Release Date: 16 Jul 2013 3340 Views

RISK: Medium Risk

TYPE: Servers - Network Management

TYPE: Network Management

Multiple vulnerabilities have been identified in multiple F5 products, which can be exploited by malicious people to cause a DoS (Denial of Service), and compromise a user's system.

  1. BIND Recursive Lookup Two Denial of Service Vulnerabilities
    The vulnerability is caused due to a bundled vulnerable version of BIND.
  2. BIG-IP APM / FirePass Client Java Applet "filename" Directory Traversal Vulnerability
    The vulnerability is caused due to the client Java applet not properly validating the temporary file path when writing files and can be exploited to overwrite arbitrary files on affected machines via directory traversal sequences.

    Successful exploitation may allow execution of arbitrary code.

Impact

  • Denial of Service
  • Remote Code Execution

System / Technologies affected

  • FirePass 6.x, 7.x
  • F5 Enterprise Manager 1.x, 2.x, 3.x
  • F5 BIG-IP Access Policy Manager 10.x, 11.x
  • F5 TMOS 9.x, 10.x, 11.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update or upgrade to a patched version


Vulnerability Identifier


Source


Related Link