ID de Prueba:	1.3.6.1.4.1.25623.1.0.140220
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - TMM vulnerability CVE-2016-7468
Resumen:	An unauthenticated remote attacker may be able to disrupt services on the BIG-IP system with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive database variable value is set to enabled. The default value for the tm.tcpprogressive database variable is negotiate.
Descripción:	Summary: An unauthenticated remote attacker may be able to disrupt services on the BIG-IP system with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive database variable value is set to enabled. The default value for the tm.tcpprogressive database variable is negotiate. Vulnerability Impact: The Traffic Management Microkernel (TMM) may restart and temporarily fail to process traffic. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7468 BugTraq ID: 97119 http://www.securityfocus.com/bid/97119 http://www.securitytracker.com/id/1038121 Common Vulnerability Exposure (CVE) ID: CVE-2016-9244 BugTraq ID: 96143 http://www.securityfocus.com/bid/96143 https://www.exploit-db.com/exploits/41298/ http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html https://blog.filippo.io/finding-ticketbleed/ https://filippo.io/Ticketbleed/ https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py http://www.securitytracker.com/id/1037800 Common Vulnerability Exposure (CVE) ID: CVE-2016-5023 BugTraq ID: 92670 http://www.securityfocus.com/bid/92670 http://www.securitytracker.com/id/1036624
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.