Detections
Analytics

Palo Alto Networks PAN-OS 5.0.9 Multiple Vulnerabilities

low Nessus Plugin ID 72828

Language:

Synopsis

The remote host is affected by multiple vulnerabilities.

Description

The remote host is running version 5.0.9 of Palo Alto Networks PAN-OS.
It is, therefore, affected by multiple vulnerabilities :

 - A denial of service vulnerability exists due to an inability to handle IP packets larger than 1480 bytes through an Active/Active VWire setup. An attacker can exploit this vulnerability to cause packet loss.
 (Ref# 56153)

 - A security bypass vulnerability exists due to a flaw in Zone Protection when SYN Cookie is enabled. An attacker can exploit this vulnerability to evade IP spoofing checks. (Ref# 57059)

 - A security bypass vulnerability exists due to a flaw in session management when using Global Protect pre-logon mode. (Ref# 58539)

Solution

Upgrade to PAN-OS version 5.0.10 or later.

See Also

https://live.paloaltonetworks.com/docs/DOC-6386

Plugin Details

Severity: Low

ID: 72828

File Name: palo_alto_pan-os_5_0_10.nasl

Version: 1.6

Type: combined

Published: 3/5/2014

Updated: 1/2/2019

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Low

Base Score: 3.5

Temporal Score: 2.6

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:paloaltonetworks:pan-os

Required KB Items: Host/Palo_Alto/Firewall/Version, Host/Palo_Alto/Firewall/Full_Version

Exploit Ease: No known exploits are available

Patch Publication Date: 12/24/2013

Vulnerability Publication Date: 12/26/2013

Reference Information

BID: 64627