Full Disclosure mailing list archives
Medium security hole in Varnish reverse proxy
From: Tim Brown <timb () nth-dimension org uk>
Date: Mon, 29 Mar 2010 08:49:55 +0100
Hi, I've identified a couple of security flaws affecting the Varnish reverse proxy which may allow privilege escalation. These issues were reported by email to the vendor but he feels that it is a configurational issue rather than a design flaw. Whilst I can partially see his point in that the administrative interface can be disabled, I'm not convinced that making a C compiler available over a network interface without authentication is sound practice, especially when the resultant compiled code can be made to run as root rather trivially. Tim -- Tim Brown <mailto:timb () nth-dimension org uk> <http://www.nth-dimension.org.uk/>
Attachment:
NDSA20090908.txt.asc
Description:
Attachment:
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Medium security hole in Varnish reverse proxy Tim Brown (Mar 29)
- Re: Medium security hole in Varnish reverse proxy John Adams (Mar 29)
- Re: Medium security hole in Varnish reverse proxy Tim Brown (Mar 29)
- Re: Medium security hole in Varnish reverse proxy John Adams (Mar 29)