F5 Networks BIG-IP : Linux kernel vulnerability (K95345942)

medium Nessus Plugin ID 101242

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. (CVE-2015-3339)

Impact

A local user with advanced shell ( bash ) access on a BIG-IP system, or with local administrator access on a Traffix system, may be able to use this flaw to gain elevated privileges. In supported configurations on the BIG-IP system, advanced shell access is limited to system administrators. BIG-IP appliance mode does not expose this issue, as users are not allowed advanced shell access in this mode. On Traffix systems, only administrators have local access.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution K95345942.

Plugin Details

Severity: Medium

ID: 101242

File Name: f5_bigip_SOL95345942.nasl

Version: 3.6

Type: local

Family: F5 Networks Local Security Checks

Published: 7/6/2017

Updated: 3/10/2021

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 5.4

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_wan_optimization_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip, cpe:/h:f5:big-ip_protocol_security_manager

Required KB Items: Host/local_checks_enabled, Settings/ParanoidReport, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version

Exploit Ease: No known exploits are available

Patch Publication Date: 1/29/2016

Vulnerability Publication Date: 5/27/2015

Reference Information

CVE: CVE-2015-3339

BID: 74243

Detections

Analytics