Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pan-os | Paloaltonetworks | 5.0.0 (including) | 5.0.20 (excluding) |
| Pan-os | Paloaltonetworks | 5.1 (including) | 5.1.13 (excluding) |
| Pan-os | Paloaltonetworks | 6.0.0 (including) | 6.0.15 (excluding) |
| Pan-os | Paloaltonetworks | 6.1.0 (including) | 6.1.15 (excluding) |
| Pan-os | Paloaltonetworks | 7.0.0 (including) | 7.0.11 (excluding) |
| Pan-os | Paloaltonetworks | 7.1.0 (including) | 7.1.6 (excluding) |
References
- http://www.securityfocus.com/bid/94400
- http://www.securitytracker.com/id/1037381
- https://security.paloaltonetworks.com/CVE-2016-9151
- https://www.exploit-db.com/exploits/40788/
- https://www.exploit-db.com/exploits/40789/
- http://www.securityfocus.com/bid/94400
- http://www.securitytracker.com/id/1037381
- https://security.paloaltonetworks.com/CVE-2016-9151
- https://www.exploit-db.com/exploits/40788/
- https://www.exploit-db.com/exploits/40789/