Lucene search

K
redhatRedHatRHSA-2014:0174
HistoryFeb 13, 2014 - 12:00 a.m.

(RHSA-2014:0174) Important: piranha security update

2014-02-1300:00:00
access.redhat.com
8

0.07 Low

EPSS

Percentile

94.0%

Piranha provides high-availability and load-balancing services for Red Hat
Enterprise Linux. The piranha packages contain various tools to administer
and configure the Linux Virtual Server (LVS), as well as the heartbeat and
failover components. LVS is a dynamically-adjusted kernel routing mechanism
that provides load balancing, primarily for Web and FTP servers.

It was discovered that the Piranha Configuration Tool did not properly
restrict access to its web pages. A remote attacker able to connect to the
Piranha Configuration Tool web server port could use this flaw to read or
modify the LVS configuration without providing valid administrative
credentials. (CVE-2013-6492)

All piranha users are advised to upgrade to this updated package, which
contains a backported patch to correct this issue.

0.07 Low

EPSS

Percentile

94.0%