PT-1999-1783 · F5 · F5 Big/Ip

Publicado 1999-11-08 · Atualizado 2018-10-30 · CVE-1999-1550

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: F5 BIG/ip versions 2.1.2 and earlier

Description: The issue allows remote attackers to read arbitrary files by specifying the target file in the file parameter of the bigconf.conf file.

Recommendations: For F5 BIG/ip versions 2.1.2 and earlier, consider restricting access to the bigconf.conf file to minimize the risk of exploitation. Avoid using the file parameter in the bigconf.conf file until the issue is resolved.

Correção

Identificadores relacionados

CVE-1999-1550

Produtos afetados

F5 Big/Ip

Referências · 6

• http://securityfocus.com/bid/778 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=94217006208374&w=2 · Nota
• http://iss.net/security_center/static/7771.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1550 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=94217879020184&w=2 · Nota
• http://marc.info/?l=bugtraq&m=94225879703021&w=2 · Nota