The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-348:01 advisory.

    Various tools to administer and configure the Linux Virtual Server as well as heartbeating and failover     components. The LVS is a dynamically adjusted kernel routing mechanism that provides load balancing     primarily for web and ftp servers though other services are supported.
    Security issues fixed with this release:
     CVE-2013-6492      The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which     allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST     request.
    Fixed bugs:
     Previously, the lvsd service failed to start, because the sem_timedwait() function received the     interrupted function call (EINTR) error and exited. This has been fixed.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which     allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST     request. (CVE-2013-6492)

Note that Nessus relies on the presence of the package as reported by the vendor.

An updated piranha package that fixes one security issue is now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Piranha provides high-availability and load-balancing services for Red Hat Enterprise Linux. The piranha packages contain various tools to administer and configure the Linux Virtual Server (LVS), as well as the heartbeat and failover components. LVS is a dynamically-adjusted kernel routing mechanism that provides load balancing, primarily for Web and FTP servers.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

All piranha users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

This update also fixes the following bug :

  - When the lvsd service attempted to start, the     sem_timedwait() function received the interrupted     function call (EINTR) error and exited, causing the lvsd     service to fail to start. With this update, EINTR errors     are correctly ignored during the start-up of the lvsd     service.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

An updated piranha package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Piranha provides high-availability and load-balancing services for Red Hat Enterprise Linux. The piranha packages contain various tools to administer and configure the Linux Virtual Server (LVS), as well as the heartbeat and failover components. LVS is a dynamically-adjusted kernel routing mechanism that provides load balancing, primarily for Web and FTP servers.

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. (CVE-2013-6492)

This update also fixes the following bug :

* When the lvsd service attempted to start, the sem_timedwait() function received the interrupted function call (EINTR) error and exited, causing the lvsd service to fail to start. With this update, EINTR errors are correctly ignored during the start-up of the lvsd service. (BZ#1055709)

All piranha users are advised to upgrade to this updated package, which contains backported patches to correct these issues.

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0174 advisory.

    [0.8.4-26.1.0.1]
    - Replace web/web/RedHat.gif with updated image in tarball

    [0.8.4-26.1]
    - Resolves: #1061903 - require authentication for all HTTP methods

    [0.8.4-26]
    - Resolves: #886361 - add SIGCHLD handler to pulse for lvs mode

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
289259	MiracleLinux 4 : piranha-0.8.6-4.2.0.1.AXS4 (AXSA:2014-348:01)	Nessus	Miracle Linux Local Security Checks	critical
218105	Linux Distros Unpatched Vulnerability : CVE-2013-6492	Nessus	Misc.	critical
78998	RHEL 5 : piranha (RHSA-2014:0174)	Nessus	Red Hat Local Security Checks	medium
72501	Scientific Linux Security Update : piranha on SL6.x i386/x86_64 (20140213)	Nessus	Scientific Linux Local Security Checks	medium
72500	Scientific Linux Security Update : piranha on SL5.x i386/x86_64 (20140213)	Nessus	Scientific Linux Local Security Checks	medium
72499	RHEL 6 : piranha (RHSA-2014:0175)	Nessus	Red Hat Local Security Checks	medium
72496	Oracle Linux 5 : piranha (ELSA-2014-0174)	Nessus	Oracle Linux Local Security Checks	critical
72493	CentOS 6 : piranha (CESA-2014:0175)	Nessus	CentOS Local Security Checks	medium
72492	CentOS 5 : piranha (CESA-2014:0174)	Nessus	CentOS Local Security Checks	medium

Detections

Analytics

CVE-2013-6492

critical

Tenable Plugins

critical

critical

medium

medium

medium

medium

critical

medium

medium