CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

F5 BIG-IP PEM Input Validation Error Vulnerability

F5 BIG-IP PEM is a policy enforcer used in BIG-IP from F5 USA. An input validation error vulnerability exists in F5 BIG-IP PEM, which can be exploited by an attacker to cause traffic processing interruptions...

Juniper Networks Junos OS Denial of Service Vulnerability while Processing HTTP Traffic

Denial of Service vulnerability in flowd while processing valid HTTP traffic. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Junos SRX Series UAC Enforcer HTTP Remote Code Execution (JSA10574)

According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. Sending a specially crafted HTTP request to an SRX series device can result in arbitrary code execution. A remote, unauthenticated attacker could exploit this to execute arbitrary cod...

CVE-2013-4685

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...

CVE-2013-4685

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...

CVE-2013-4685

Juniper Junos OS contains a buffer overflow in flowd when processing HTTP messages (CVE-2013-4685). Affected are SRX devices with Captive Portal and UAC enforcer role across listed revisions: 10.4 before 10.4S14; 11.4 before 11.4R7; 12.1 before 12.1R6; and 12.1X44 before 12.1X44-D15. The vulnerab...

OpenDNSSEC 1.3.0rc2 new Version released !

OpenDNSSEC 1.3.0rc2 new Version released ! Version 1.3.0rc2 of OpenDNSSEC Match the names of the signer pidfile and enforcer pidfile. Include check for resign resalt in ods-kaspcheck. Bugfixes: Bugfix 231: Fix MySQL version check. ods-ksmutil: Update now sends a HUP to the enforcerd. Signer Engin...

CVE-2006-3723

Technical details for CVE-2006-3723 are not publicly available in the provided documents. Monitor for updates; no disclosed affected components, impact, or remediation are provided here.

CVE-2003-0931

Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service service hang by replaying a malformed discovery packet to UDP port 39999...

CVE-2004-0593

Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules...

CVE-2003-0931

Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service service hang by replaying a malformed discovery packet to UDP port 39999...

CVE-2004-0593

CVE-2004-0593 concerns Sygate Enforcer 3.5MR1 and earlier, where the appliance passes broadcast traffic before authentication, enabling remote attackers to bypass filtering rules. The issue affects the Enforcer’s capability to enforce policy prior to authentication, potentially exposing protected...

CVE-2003-0931

The CVE-2003-0931 entry concerns Sygate Enforcer 4.0 (earlier) where a remote attacker can cause a denial-of-service (service hang) by replaying a malformed discovery packet to UDP port 39999. The vulnerability is network‑facing and arises from processing malformed discovery packets, leading to p...

CVE-2004-0593

Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules...

Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue

-- Corsaire Security Advisory -- Title: Sygate Enforcer unauthenticated broadcast issue Date: 20.11.03 Application: Sygate Enforcer prior to 3.5MR1 Environment: Windows NT, 2000, 2003 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c031120-003 -- Scope --...