For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Packeteer_69831's avatar
Packeteer_69831
Icon for Nimbostratus rankNimbostratus
Mar 17, 2011

ASM and Oracle Security Alert CVE-2010-4476

Hello,     I am investigating the possibility of using ASM to protect our Java based application services from this vulnerability, until such time that our rather strict deployment cycle catches...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 18, 2011
Hi Packeteer,

 

 

An update to the ASM attack sigs to handle CVE 2010-4645 was released on downloads.f5.com:

 

 

sol8217: Updating the BIG-IP ASM attack signatures

 

http://support.f5.com/kb/en-us/solutions/public/8000/200/sol8217.html

 

 

https://downloads.f5.com/esd/eula.sv?sw=BIG-IP&pro=big-ip_v10.x&ver=10.2.1&container=ASM-LatestSignatureFile&path=&desc=&file=&prodesc=BIG-IP+v10.x+%2F+Virtual+Edition&B1=I+Accept

 

 

Aaron