F5 BIG-IP CVE-2012-3000 SQL Injection Vulnerability
BID:57500
Info
F5 BIG-IP CVE-2012-3000 SQL Injection Vulnerability
| Bugtraq ID: | 57500 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-3000 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 22 2013 12:00AM |
| Updated: | Mar 19 2015 08:21AM |
| Credit: | S. Viehböck of SEC Consult Vulnerability Lab |
| Vulnerable: |
F5 BIG-IP PSM 11.2 F5 BIG-IP PSM 11.1 F5 BIG-IP PSM 11.0 F5 BIG-IP PSM 11.2.1 F5 BIG-IP LTM 11.2 F5 BIG-IP LTM 11.0 F5 BIG-IP LTM 11.2.1 F5 BIG-IP LTM 11.1.0 F5 BIG-IP Link Controller 11.2.0 0 F5 BIG-IP Link Controller 11.0.0 0 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 11.1 F5 BIG-IP GTM 11.2 F5 BIG-IP GTM 11.0 F5 BIG-IP GTM 11.2.1 F5 BIG-IP GTM 11.1.0 F5 BIG-IP Edge Gateway 11.2 F5 BIG-IP Edge Gateway 11.1 F5 BIG-IP Edge Gateway 11.0 F5 BIG-IP ASM 11.2.0 0 F5 BIG-IP ASM 11.0.0 0 F5 BIG-IP ASM 11.2.1 F5 BIG-IP ASM 11.1.0 F5 BIG-IP APM 11.2 F5 BIG-IP APM 11.0 F5 BIG-IP APM 11.2.1 F5 BIG-IP APM 11.1.0 F5 BIG-IP Analytics 11.2.1 F5 BIG-IP Analytics 11.2 F5 BIG-IP Analytics 11.1.0 F5 BIG-IP Analytics 11.0.0 F5 BIG-IP 11.2 |
| Not Vulnerable: |
F5 BIG-IP WOM 11.0 F5 BIG-IP WOM 10.2.4 F5 BIG-IP WOM 10.0 F5 BIG-IP WOM 11.3.0 F5 BIG-IP WebAccelerator 9.4.8 0 F5 BIG-IP WebAccelerator 11.3 F5 BIG-IP WebAccelerator 11.0 F5 BIG-IP WebAccelerator 10.2.4 F5 BIG-IP PSM 11.3 F5 BIG-IP PSM 10.2.4 F5 BIG-IP PSM 9.4.8 F5 BIG-IP PSM 11.2.1 HF3 F5 BIG-IP PSM 11.2.0 HF3 F5 BIG-IP LTM 11.2.1 HF3 F5 BIG-IP LTM 11.2 HF3 F5 BIG-IP LTM 10.2.4 F5 BIG-IP LTM 9.4.8 F5 BIG-IP LTM 11.3.0 F5 BIG-IP Link Controller 9.4.8 0 F5 BIG-IP Link Controller 11.3 F5 BIG-IP Link Controller 11.2.1 HF3 F5 BIG-IP Link Controller 11.2 HF3 F5 BIG-IP Link Controller 10.2.4 F5 BIG-IP GTM 11.3 F5 BIG-IP GTM 11.2.1 HF3 F5 BIG-IP GTM 10.2.4 F5 BIG-IP GTM 9.4.8 F5 BIG-IP GTM 11.2.0 HF3 F5 BIG-IP Edge Gateway 11.3 F5 BIG-IP Edge Gateway 11.2.1 HF3 F5 BIG-IP Edge Gateway 11.2 HF3 F5 BIG-IP Edge Gateway 10.2.4 F5 BIG-IP ASM 9.4.8 0 F5 BIG-IP ASM 11.2.0 HF2 0 F5 BIG-IP ASM 10.2.4 0 F5 BIG-IP ASM 11.3.0 F5 BIG-IP ASM 11.2.1 HF3 F5 BIG-IP APM 10.2.4 F5 BIG-IP APM 11.3.0 F5 BIG-IP APM 11.2.1 HF3 F5 BIG-IP APM 11.2.0 HF3 F5 BIG-IP Analytics 11.3 F5 BIG-IP Analytics 11.2.1 HF3 F5 BIG-IP Analytics 11.2 HF3 F5 BIG-IP 11.2.1 HF3 F5 BIG-IP 11.2 HF3 |
Exploit / POC
F5 BIG-IP CVE-2012-3000 SQL Injection Vulnerability
An attacker can exploit the issue using a browser.
The following exploit is available:
An attacker can exploit the issue using a browser.
The following exploit is available:
Solution / Fix
F5 BIG-IP CVE-2012-3000 SQL Injection Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.