CVE-2012-1777

CVE-2012-1777 affects F5 FirePass: SQL injection in the web interface (my.activation.php3) that allows an unauthenticated remote attacker to execute arbitrary SQL through the state parameter. Affected products/versions per the advisory: FirePass 6.0.0–6.1.0 and 7.0.0. The issue is caused by insuf...

CVE-2012-1777

SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter...

CVE-2012-2053

Summary: CVE-2012-2053 affects F5 FirePass 6.0.0–6.1.0 and 7.0.0, where the sudoers configuration allows passwordless sudo for root, enabling local privilege escalation if an attacker gains OS access (e.g., via a PHP-executing user). The issue is a separate vulnerability from CVE-2012-1777. Root ...

F5 FirePass SSL VPN 6.x / 7.x SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated remote root through SQL injection product: F5 FirePass SSL VPN vulnerable version: 6.0.0 - 6.1.0, 7.0.0 fixed version: 6.1.0 HF-377712-1 / 7.0.0 HF-377712...

F5 FirePass 7.0 - SQL Injection

source: https://www.securityfocus.com/bid/52653/info FirePass is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, o...

SOL13463 - FirePass SQL injection vulnerability - CVE-2012-1777

Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. F5 strongly recommends installing FirePass HF-377712-1 to address this vulnerability. Supplemental Information CERT advisory regarding...

F5 FirePass 7.0 - SQL Injection

F5 FirePass 7.0 - SQL Injection source: https://www.securityfocus.com/bid/52653/info FirePass is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

SOL13279 - PHP vulnerability CVE-2009-4017

Recommended Action None Supplemental Information Note: This link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view n...

SOL11795 - Pre-logon sequence vulnerability to Cross-Site Scripting

Cross-site scripting XSS vulnerabilities exist in the FirePass pre-logon pages, which are accessible prior to authentication. The affected FirePass pages fail to fully sanitize HTTP request input before the web page content is sent to the browser. By altering the HTTP request input via the posted...

SOL11797 - Pre-logon sequence vulnerability to token spoofing

A vulnerability exists in the FirePass pre-logon sequence. Under certain conditions, the FirePass controller can accept the output of a pre-logon sequence check that would have been run on a different computer. This vulnerability would allow an attacker to use the pre-logon token from a workstati...

SOL10509 - Sockstress DoS tool vulnerability CVE-2008-4609

Sockstress DoS tool CVE-2008-4609. The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate...

SOL10441 - Microsoft Active Template Library (ATL) vulnerabilities VU#456745

Information about this advisory is available at the following locations: F5 Product Development tracked this issue as ID 296507 formerly CR125945 for FirePass, and it was fixed in FirePass 6.1.0. For information about upgrading, refer to the FirePass release notes. Obtaining and installing patche...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

CVE-2009-2119 is an XSS vulnerability in the FirePass login interface (my.logon.php3) affecting F5 FirePass SSL VPN 5.5–5.5.2 and 6.0–6.0.3. The issue allows remote attackers to inject arbitrary script/HTML via a base64-encoded xcho parameter. The root cause is insufficient sanitization of input ...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

F5 FirePass 4100 crossite scripting

SSL VPN downloadplugin.php3, page backurl parameter, my.logon.php3, my.activation.php3 crossite scripting...

SOL10143 - Cross-Site Scripting Vulnerabilities in the FirePass logon

Cross-site scripting XSS vulnerabilities exist in the FirePass logon page, which is accessible prior to authentication. The affected FirePass page fails to fully sanitize HTTP request input before the web page content is sent to the browser. By altering the HTTP request input in the cookie, a...

SOL10020 - Multiple Cross-Site Scripting Vulnerabilities in the FirePass logon and activation pages

It is possible for a remote attacker to create web pages, emails, or other media containing hyperlinks to the vulnerable FirePass web pages. These hyperlinks may include executable code or other malicious data. Following one of these hyperlinks to the FirePass controller could result in...

SOL9889 - NTP vulnerability CVE-2009-0021

Description NTP may not properly check the return value from the OpenSSL EVPVerifyFinal function, which may allow a remote attacker to bypass validation of the certificate chain by way of a malformed SSL/TLS signature for DSA and ECDSA keys. Note: This is a similar vulnerability to CVE-2008-5077...