[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2014:0174 -- centos 5 piranha

ID: oval:org.secpod.oval:def:203030Date: (C)2014-03-03   (M)2023-12-07
Class: PATCHFamily: unix




Piranha provides high-availability and load-balancing services for Red Hat Enterprise Linux. The piranha packages contain various tools to administer and configure the Linux Virtual Server , as well as the heartbeat and failover components. LVS is a dynamically-adjusted kernel routing mechanism that provides load balancing, primarily for Web and FTP servers. It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative credentials. All piranha users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.

Platform:
CentOS 5
Product:
piranha
Reference:
CESA-2014:0174
CVE-2013-6492
CVE    1
CVE-2013-6492
CPE    2
cpe:/a:piranha:piranha
cpe:/o:centos:centos:5

© SecPod Technologies