|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
F5 FirePass 1200 SNMP daemon DoS
nnposter
disclosed.not
Date: Thu Jul 03 2008 - 20:29:05 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
F5 FirePass 1200 SNMP daemon DoS
Product: F5 FirePass 1200
http://www.f5.com/products/firepass/
The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing (walking) OID branch hrSWInstalled in HOST-RESOURCES-MIB (OID 1.3.6.1.2.1.25.6) will cause the daemon to crash. No analysis has been done to determine if the vulnerability is further exploitable.
The vulnerability has been identified in version 6.0.2, hotfix 3. However, other versions may be also affected.
Solution:
Limit network access to the SNMP daemon.
Found by:
nnposter
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]