Palo Alto Networks PAN-OS < 5.0.15 / 5.1.x < 5.1.10 / 6.0.x < 6.0.6 / 6.1.x < 6.1.1 Bash Shell Remote Code Execution (Shellshock)
critical Nessus Plugin ID 78587
Language:
Synopsis
The remote host is affected by a remote code execution vulnerability.Description
The remote host is running a version of Palo Alto Networks PAN-OS prior to 5.0.15 / 5.1.10 / 6.0.6 / 6.1.1. It is, therefore, affected by a command injection vulnerability in GNU Bash known as Shellshock, which is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a remote attacker to execute arbitrary code via environment variable manipulation depending on the configuration of the system.Solution
Upgrade to PAN-OS version 5.0.15 / 5.1.10 / 6.0.6 / 6.1.1 or later.See Also
https://securityadvisories.paloaltonetworks.com/Home/Detail/24
Plugin Details
Severity: Critical
ID: 78587
File Name: palo_alto_PAN-SA-2014-0004.nasl
Version: 1.13
Type: combined
Family: Palo Alto Local Security Checks
Published: 10/20/2014
Updated: 1/31/2022
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Temporal Vector: E:H/RL:OF/RC:C
CVSS Score Source: CVE-2014-7169
Vulnerability Information
CPE: cpe:/o:paloaltonetworks:pan-os
Required KB Items: Host/Palo_Alto/Firewall/Version, Host/Palo_Alto/Firewall/Full_Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/25/2014
Vulnerability Publication Date: 9/24/2014
CISA Known Exploited Dates: 7/28/2022
Exploitable With
Core Impact
Metasploit (Qmail SMTP Bash Environment Variable Injection (Shellshock))
Reference Information
CVE: CVE-2014-6271, CVE-2014-7169