PT-1999-1783 · F5 · F5 Big/Ip

Published 1999-11-08 · Updated 2018-10-30 · CVE-1999-1550

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: F5 BIG/ip versions 2.1.2 and earlier

Description: The issue allows remote attackers to read arbitrary files by specifying the target file in the file parameter of the bigconf.conf file.

Recommendations: For F5 BIG/ip versions 2.1.2 and earlier, consider restricting access to the bigconf.conf file to minimize the risk of exploitation. Avoid using the file parameter in the bigconf.conf file until the issue is resolved.

Fix

Related Identifiers

CVE-1999-1550

Affected Products

F5 Big/Ip

References · 6

• http://securityfocus.com/bid/778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1550 · Security Note
• http://marc.info/?l=bugtraq&m=94217006208374&w=2 · Note
• http://iss.net/security_center/static/7771.php · Note
• http://marc.info/?l=bugtraq&m=94217879020184&w=2 · Note
• http://marc.info/?l=bugtraq&m=94225879703021&w=2 · Note