PT-2009-6541 · F5 · Big-Ip Application Security Manager+1

Published 2009-12-24 · Updated 2019-06-06 · CVE-2009-4420

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 Networks BIG-IP Application Security Manager (ASM) versions 9.4.4 through 9.4.7 F5 Networks BIG-IP Application Security Manager (ASM) versions 10.0.0 through 10.0.1 F5 Networks BIG-IP Protocol Security Manager (PSM) versions 9.4.5 through 9.4.7 F5 Networks BIG-IP Protocol Security Manager (PSM) versions 10.0.0 through 10.0.1

Description A buffer overflow issue in the bd daemon allows remote attackers to cause a denial of service, resulting in a crash, via unknown vectors.

Recommendations For F5 Networks BIG-IP Application Security Manager (ASM) versions 9.4.4 through 9.4.7, update to a version outside of this range to resolve the issue. For F5 Networks BIG-IP Application Security Manager (ASM) versions 10.0.0 through 10.0.1, update to a version outside of this range to resolve the issue. For F5 Networks BIG-IP Protocol Security Manager (PSM) versions 9.4.5 through 9.4.7, update to a version outside of this range to resolve the issue. For F5 Networks BIG-IP Protocol Security Manager (PSM) versions 10.0.0 through 10.0.1, update to a version outside of this range to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4420

Affected Products

Big-Ip Application Security Manager

Big-Ip Protocol Security Manager

References · 8

• http://secunia.com/advisories/37805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4420 · Security Note
• http://vupen.com/english/advisories/2009/3627 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55005 · Note
• http://osvdb.org/61297 · Note
• http://securitytracker.com/id?1023386 · Note
• https://support.f5.com/kb/en-us/solutions/public/10000/400/sol10417.html · Note
• http://securityfocus.com/bid/37452 · Note