Detections
Analytics
F5 Networks BIG-IP : Multiple PHP vulnerabilities (SOL7859)
high Nessus Plugin ID 78215
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
The remote BIG-IP device is missing a patch required by a security advisory.Solution
Upgrade to one of the non-vulnerable versions listed in the F5 Solution SOL7859.See Also
Plugin Details
Severity: High
ID: 78215
File Name: f5_bigip_SOL7859.nasl
Version: 1.14
Type: local
Published: 10/10/2014
Updated: 1/11/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N
Vulnerability Information
CPE: cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip
Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/16/2007
Exploitable With
Metasploit (PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie))
Reference Information
CVE: CVE-2007-0455, CVE-2007-1001, CVE-2007-1285, CVE-2007-1286, CVE-2007-1583, CVE-2007-1711, CVE-2007-1718, CVE-2007-1846, CVE-2007-1864, CVE-2007-2509