Forum Discussion
Barny_Riches
Altostratus
Jan 27, 2021CVE-2021-3156 | SUDO Heap-based Buffer Overflow
Are any of the BIG-IP versions affected by the recent SUDO vulnerability announcement? I have checked our F5 estate and I don't believe that the SUDO package is installed or used, but I just want to ...
Nicolas_Menant
Employee
Sep 18, 2008Can you show us your iRule ? that would help to find any exception
Thanks
- Dario_GarridoAug 27, 2021
Noctilucent
Hello Alex.
This is working for me:
session.logon.last.username = expr { "[mcget {session.logon.last.username}].0" }
Regards,
Dario.
Hi Dario,
Thanks for the response!
I've just tried this one in my lab, but unfortunately it still strips off the leading 0 when I look at session.logon.last.username afterwards. When you run it with for example 012346 as a username, what does the variable look like afterwards in your system?
Thanks!
- Dario_GarridoAug 27, 2021
Noctilucent
Hello Alex.
Apply this iRule to your VS.
when ACCESS_POLICY_AGENT_EVENT { if { [ACCESS::policy agent_id] eq "format_username" } { ACCESS::session data set session.logon.last.username "[ACCESS::session data get "session.logon.last.username"].0" } }
Then configure an iRule Event box in your APM policy with ID "format_username".
Let me know if this works in your scenario.
Regards,
Dario.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects