CVE Vulnerabilities

CVE-2012-2053

Published: Apr 05, 2012 | Modified: Dec 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as root, which allows local users to gain privileges via the sudo program, as demonstrated by the user account that executes PHP scripts, a different vulnerability than CVE-2012-1777.

Affected Software

Name Vendor Start Version End Version
Firepass F5 6.0 (including) 6.0 (including)
Firepass F5 6.1.0 (including) 6.1.0 (including)
Firepass F5 7.0.0 (including) 7.0.0 (including)

References