PT-2007-1671 · F5 · F5 Firepass

Publicado

2007-01-11

·

Atualizado

2008-11-15

·

CVE-2007-0187

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions F5 FirePass versions 5.4 through 5.5.2 F5 FirePass version 6.0
Description The issue allows remote attackers to access restricted URLs through various methods, including a trailing null byte, multiple leading slashes, Unicode encoding, URL-encoded directory traversal or same-directory characters, or upper case letters in the domain name.
Recommendations For F5 FirePass versions 5.4 through 5.5.2, update to a version that addresses the issue of accessing restricted URLs through special characters and encoding. For F5 FirePass version 6.0, update to a version that addresses the issue of accessing restricted URLs through special characters and encoding. As a temporary workaround, consider restricting access to sensitive URLs to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-0187

Produtos afetados

F5 Firepass