F5 BIG-IP ASM and PSM Remote Buffer Overflow Vulnerability

Bugtraq ID:	37452
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 23 2009 12:00AM
Updated:	Dec 28 2009 06:02PM
Credit:	The vendor.
Vulnerable:	F5 BIG-IP Protocol Security Manager 10.0.1 F5 BIG-IP Protocol Security Manager 10.0 F5 BIG-IP Protocol Security Manager 9.4.7 F5 BIG-IP Protocol Security Manager 9.4.6 F5 BIG-IP Protocol Security Manager 9.4.5 F5 BIG-IP Application Security Manager 10.0.1 F5 BIG-IP Application Security Manager 10.0 F5 BIG-IP Application Security Manager 9.4.7 F5 BIG-IP Application Security Manager 9.4.6 F5 BIG-IP Application Security Manager 9.4.5 F5 BIG-IP Application Security Manager 9.4.4
Not Vulnerable:	F5 BIG-IP Protocol Security Manager 10.1 F5 BIG-IP Protocol Security Manager 9.4.8 F5 BIG-IP Application Security Manager 10.1 F5 BIG-IP Application Security Manager 9.4.8

F5 BIG-IP ASM and PSM Remote Buffer Overflow Vulnerability

F5 BIG-IP Application Security Manager (ASM) and Protocol Security Manager (PSM) are prone to a remote buffer-overflow vulnerability.

An attacker may exploit this issue to execute arbitrary code with the privileges of the affected application. Successful exploits may compromise affected devices. Failed exploit attempts will result in a denial-of-service condition.

Technical details are currently unavailable. We will update this BID as more information emerges.

F5 BIG-IP ASM and PSM Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

F5 BIG-IP ASM and PSM Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

F5 BIG-IP ASM and PSM Remote Buffer Overflow Vulnerability

References:

• BIG-IP Application Security Manager Homepage (F5)
  
• BIG-IP Protocol Security Module (F5)
  
• F5 Networks (CR126690) (F5)