The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.

An updated piranha package that fixes one security issue is now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Piranha provides high-availability and load-balancing services for Red Hat Enterprise Linux. The piranha packages contain various tools to administer and configure the Linux Virtual Server (LVS), as well as the heartbeat and failover components. LVS is a dynamically-adjusted kernel routing mechanism that provides load balancing, primarily for Web and FTP servers.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

All piranha users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

This update also fixes the following bug :

  - When the lvsd service attempted to start, the     sem_timedwait() function received the interrupted     function call (EINTR) error and exited, causing the lvsd     service to fail to start. With this update, EINTR errors     are correctly ignored during the start-up of the lvsd     service.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

An updated piranha package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Piranha provides high-availability and load-balancing services for Red Hat Enterprise Linux. The piranha packages contain various tools to administer and configure the Linux Virtual Server (LVS), as well as the heartbeat and failover components. LVS is a dynamically-adjusted kernel routing mechanism that provides load balancing, primarily for Web and FTP servers.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

This update also fixes the following bug :

* When the lvsd service attempted to start, the sem_timedwait() function received the interrupted function call (EINTR) error and exited, causing the lvsd service to fail to start. With this update, EINTR errors are correctly ignored during the start-up of the lvsd service. (BZ#1055709)

All piranha users are advised to upgrade to this updated package, which contains backported patches to correct these issues.

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0174 advisory.

    [0.8.4-26.1.0.1]
    - Replace web/web/RedHat.gif with updated image in tarball

    [0.8.4-26.1]
    - Resolves: #1061903 - require authentication for all HTTP methods

    [0.8.4-26]
    - Resolves: #886361 - add SIGCHLD handler to pulse for lvs mode

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
78998	RHEL 5 : piranha (RHSA-2014:0174)	Nessus	Red Hat Local Security Checks	medium
72501	Scientific Linux Security Update : piranha on SL6.x i386/x86_64 (20140213)	Nessus	Scientific Linux Local Security Checks	medium
72500	Scientific Linux Security Update : piranha on SL5.x i386/x86_64 (20140213)	Nessus	Scientific Linux Local Security Checks	medium
72499	RHEL 6 : piranha (RHSA-2014:0175)	Nessus	Red Hat Local Security Checks	medium
72496	Oracle Linux 5 : piranha (ELSA-2014-0174)	Nessus	Oracle Linux Local Security Checks	critical
72493	CentOS 6 : piranha (CESA-2014:0175)	Nessus	CentOS Local Security Checks	medium
72492	CentOS 5 : piranha (CESA-2014:0174)	Nessus	CentOS Local Security Checks	medium

Detections

Analytics

CVE-2013-6492

critical

Tenable Plugins

medium

medium

medium

medium

critical

medium

medium