[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FD] F5 BIG-IQ authed arbitrary user password change
- To: "fulldisclosure@xxxxxxxxxxxx" <fulldisclosure@xxxxxxxxxxxx>
- Subject: [FD] F5 BIG-IQ authed arbitrary user password change
- From: Brandon Perry <bperry.volatile@xxxxxxxxx>
- Date: Thu, 1 May 2014 17:10:40 -0500
Hi,
Detailed at this blog post (with pics!) is a vulnerability within F5 BIG-IQ
4.1.0.2013.0.
http://volatile-minds.blogspot.com/2014/05/f5-big-iq-v41020130-authenticated.html
A module for this will be uploaded to ExploitHub this evening that will
change the root users password and log in over SSH.
Tune in next week for even more F5 fun!
--
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website
_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/