F5 Products Multiple Vulnerabilities
Last Update Date:
16 Jul 2013 10:52
Release Date:
16 Jul 2013
3855
Views
RISK: Medium Risk
TYPE: Servers - Network Management
Multiple vulnerabilities have been identified in multiple F5 products, which can be exploited by malicious people to cause a DoS (Denial of Service), and compromise a user's system.
- BIND Recursive Lookup Two Denial of Service Vulnerabilities
The vulnerability is caused due to a bundled vulnerable version of BIND. - BIG-IP APM / FirePass Client Java Applet "filename" Directory Traversal Vulnerability
The vulnerability is caused due to the client Java applet not properly validating the temporary file path when writing files and can be exploited to overwrite arbitrary files on affected machines via directory traversal sequences.
Successful exploitation may allow execution of arbitrary code.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- FirePass 6.x, 7.x
- F5 Enterprise Manager 1.x, 2.x, 3.x
- F5 BIG-IP Access Policy Manager 10.x, 11.x
- F5 TMOS 9.x, 10.x, 11.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Update or upgrade to a patched version
Vulnerability Identifier
Source
Related Link
- http://support.f5.com/kb/en-us/solutions/public/14000/200/sol14201.html
- http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14386.html
- http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html
- http://secunia.com/advisories/54056/
- http://secunia.com/advisories/54066/
- http://secunia.com/advisories/53477/
Share with