F5 tmos http Server ByteRange Filter DoS Vulnerability

Release date:
Updated on:

Affected Systems:
F5 TMOS 11.x
F5 TMOS 10.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-3192

TMOS is a full proxy solution for application delivery networks.

F5 TMOS has a security vulnerability in the implementation of ByteRange Filter, which can be exploited by malicious users to cause DOS.

<* Source: vendor

Link: http://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnotes-LTM-10-2-3.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

F5
--
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.f5.com/