Language:
Severity: High
ID: 105469
File Name: f5_bigip_SOL51931024.nasl
Version: 3.8
Type: local
Published: 12/28/2017
Updated: 3/18/2020
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Factor: High
Score: 7.4
Risk Factor: Medium
Base Score: 6.2
Temporal Score: 5.1
Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C
Risk Factor: High
Base Score: 7.4
Temporal Score: 6.9
Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip, cpe:/h:f5:big-ip_protocol_security_manager
Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version, Settings/ParanoidReport
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/11/2017
Vulnerability Publication Date: 6/19/2017
Metasploit (rsh_stack_clash_priv_esc.rb)
CVE: CVE-2017-1000364