PT-2012-3767 · F5 · F5 Firepass

Publicado 2012-04-04 · Atualizado 2017-12-20 · CVE-2012-2053

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F5 FirePass versions 6.0.0 through 6.1.0 F5 FirePass version 7.0.0

Description The issue concerns the sudoers file in the Linux system configuration, which does not require a password for executing commands as root. This allows local users to gain privileges via the sudo program. For example, a user account that executes PHP scripts can exploit this issue.

Recommendations For F5 FirePass versions 6.0.0 through 6.1.0, update the sudoers file to require a password for executing commands as root. For F5 FirePass version 7.0.0, update the sudoers file to require a password for executing commands as root. As a temporary workaround, consider restricting access to the sudo program until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2053

Produtos afetados

F5 Firepass

Referências · 3

• 🔥 https://sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74813 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2053 · Nota de Segurança