<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
If even the author of the firmware said this to me, I would wonder
if he really had looked hard enough for attack vectors.<br>
<br>
Reports all say they are working to identify more of the surface
area for this attack, any listening IP port (perhaps even some
outgoing connections to a malicious and cleverly written endpoint?)
would be a candidate.<br>
<br>
- Tim Sheahan<br>
<br>
<br>
<div class="moz-cite-prefix">On 27/09/2014 12:31 PM, Chris Barnes
wrote:<br>
</div>
<blockquote
cite="mid:CACTt9v=TNwGAx_xan54x1GJFTr_=00T7mjJSLcYdRDajM9ncBQ@mail.gmail.com"
type="cite">
<p dir="ltr">Do you have anymore info on this?</p>
<p dir="ltr">The integrator who supports my F5s told me only the
management interface is vulnerable, public facing interfaces
aren't.</p>
<p dir="ltr">Not entirely convinced.<br>
</p>
<p dir="ltr">-- <br>
Kind Regards,</p>
<p dir="ltr">Christopher Barnes</p>
<p dir="ltr">e. <a moz-do-not-send="true"
href="mailto:chris.p.barnes@gmail.com">chris.p.barnes@gmail.com</a></p>
<div class="gmail_quote">On 27/09/2014 12:25 PM, "Noel Butler"
<<a moz-do-not-send="true"
href="mailto:noel.butler@ausics.net">noel.butler@ausics.net</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">F5's BIG-IP
11.6.0 also vulnerable<br>
<br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a moz-do-not-send="true"
href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a moz-do-not-send="true"
href="http://lists.ausnog.net/mailman/listinfo/ausnog"
target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>