F5 Networks BIG-IP : PHP vulnerability (SOL14574)

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid open square bracket characters in name values, which makes it easier for attackers to cause a denial of service malformed $FILES indexes or conduct directory traversal attacks during multi-file upload...

F5 Networks BIG-IP : SSH vulnerability (K13600)

A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using secure shell SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. The following platforms a...

F5 Networks BIG-IP : pam_ldap vulnerability (SOL6634)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL6634. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : Kerberos vulnerability (K15553)

Double free vulnerability in the initctxreselect function in the SPNEGO initiator in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via network...

F5 Networks BIG-IP : ConfigSync IP Rsync full file system access vulnerability (K15236)

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remo...

F5 Networks BIG-IP : BIG-IP Edge and FirePass client information leakage vulnerability (SOL14969)

A flaw in BIG-IP APM or FirePass client-side F5-signed Edge Client and FirePass legacy client components for Windows platforms may allow information to leak from memory. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP...

F5 Networks BIG-IP : OpenSSL vulnerability (SOL15343)

The dtls1getmessagefragment function in d1both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service recursion and client crash via a DTLS hello message in an invalid DTLS handshake. C Tenable Network Security, Inc. The...

F5 Networks BIG-IP : Multiple PHP vulnerabilities (SOL7859)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL7859. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : PHP vulnerability (SOL9761)

A heap-based buffer overflow in PHP 4.3.0 through 5.2.6 may allow attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9761. The text description of this...

F5 Networks BIG-IP : Rsync sender.c vulnerability (SOL15548)

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the fname function. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

F5 Networks BIG-IP : SSL decryption vulnerabilities (SOL4944)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL4944. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : cURL buffer overflow vulnerability (SOL4447)

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...

F5 Networks BIG-IP : BIND vulnerability (SOL10366)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10366. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : BIND 9: Multiple DoS vulnerabilities (SOL6612)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL6612. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : BIND 9 vulnerability (SOL9754)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9754. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : SSL Renegotiation vulnerability (SOL10737)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10737. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : OpenSSL vulnerability (K15325)

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessio...

F5 Networks BIG-IP : BIND 9 vulnerabilities - Dereferencing freed fetch context and DNSSEC Validation (SOL7053)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL7053. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : PHP vulnerability (SOL12650)

The strtod.c function may allow context-dependent attackers to cause a denial-of-service via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

F5 Networks BIG-IP : OpenSSL vulnerability (SOL15568)

The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service NULL pointer dereference and client application crash via a crafted handshake message in conjunction with a 1...