EUVD-2013-6295

Malware in sbrugna...

Authentication Bypass

piranha is vulnerable to authentication bypass. The Piranha Configuration Tool did not properly restrict access to its web pages, allowing a remote attacker to connect to the web server port to read or modify LVS configuration without valid credentials and a valid session identifier...

CVE-2013-6492

The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...

Authentication flaw

The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...

CVE-2013-6492

The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...

Scientific Linux Security Update : piranha on SL5.x i386/x86_64 (20140213)

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative...