Vulnerability CVE-2014-2927 - CERT Civis.Net

Vulnerability Name:

CVE-2014-2927 (CCN-95624)

Assigned:

2014-08-28

Published:

2014-08-28

Updated:

2015-01-26

Summary:

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.

CVSS v3 Severity:

9.4 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): Low

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.0 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:P)
6.7 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2014-2927

Source: CCN
Type: Full Disclosure Mailing List, Thu, 28 Aug 2014 22:34:48 +0000
F5 Unauthenticated rsync access to Remote Root Code Execution

Source: CCN
Type: F5 Security Advisory sol15236
ConfigSync-IP Rsync full file system access vulnerability CVE-2014-2927

Source: EXPLOIT-DB
Type: Exploit
34465

Source: MISC
Type: Exploit
http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf

Source: CCN
Type: BID-69461
Multiple F5 Networks Products CVE-2014-2927 Remote Code Execution Vulnerability

Source: XF
Type: UNKNOWN
f5-bigip-cve20142927-code-exec(95624)

Source: CCN
Type: Packet Storm Security [08-29-2014]
F5 Unauthenticated rsync Access To Remote Root Code Execution F5 Unauthenticated rsync Access To Remote Root Code Execution

Source: CONFIRM
Type: Vendor Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15236.html

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [08-29-2014]

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:arx:6.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:arx:6.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:arx:6.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:arx:6.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:arx:6.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:arx:6.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.2.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.2.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:10.2.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_cloud:4.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_cloud:4.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_security:4.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_security:4.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:2.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:2.3.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:3.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:6.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:6.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:firepass:7.0.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:f5:big-ip:11.5.1:*:*:*:*:*:*:*

Denotes that component is vulnerable