Test ID:	1.3.6.1.4.1.25623.1.0.105306
Category:	Gain a shell remotely
Title:	F5 Enterprise Manager - ConfigSync IP Rsync full file system access vulnerability CVE-2014-2927
Summary:	F5 Networks Enterprise Manager is prone to a remote code; execution (RCE) vulnerability.
Description:	Summary: F5 Networks Enterprise Manager is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: An open Rsync configuration for the ConfigSync IP address allows for remote read/write file system access in Enterprise Manager. Vulnerability Impact: An attacker can exploit this issue to execute arbitrary code within the context of the application. Affected Software/OS: Enterprise Manager 3.x version before 3.1.1 HF2. Solution: Update to Enterprise Manager 3.1.1 HF2 or higher. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2927 http://www.exploit-db.com/exploits/34465 http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.