Test ID:	1.3.6.1.4.1.25623.1.0.105172
Category:	Gain a shell remotely
Title:	Multiple F5 Networks Products - ConfigSync IP Rsync full file system access vulnerability CVE-2014-2927 - Active Check
Summary:	Multiple F5 Networks Products are prone to a remote code; execution (RCE) vulnerability.
Description:	Summary: Multiple F5 Networks Products are prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: An open Rsync configuration for the ConfigSync IP address allows for remote read/write file system access. Vulnerability Impact: An attacker can exploit this issue to execute arbitrary code within the context of the application. Affected Software/OS: F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11. Enterprise Manager 3.x before 3.1.1 HF2. Solution: Disable the rsync daemon or update to a fixed version listed at the referenced vendor advisory. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2927 http://www.exploit-db.com/exploits/34465 http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.