CVE-2009-3486: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

Juniper Junos 8.59.0 J - Web Interface (Multiple Script) m[] Cross-Site Scripting

Juniper Junos 8.59.0 J - Web Interface Multiple Script m Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to...

Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities

Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...

Juniper Junos 8.5/9.0 J - Web Interface (Multiple Script) 'm[]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-2476

The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...

CVE-2008-2476: Improper Input Validation

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

Juniper Networks JUNOS畸形BGP远程拒绝服务漏洞

BUGTRAQ ID: 26869 CNCAN ID:CNCAN-2007121801 Juniper Networks JUNOS是一款网络操作系统。 Juniper Networks JUNOS不正确处理特殊构建的BGP报文，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Juniper Networks JUNOS 8.4 Juniper Networks JUNOS 7.3 升级到JUNOS 8.5R1版本： http://www.juniper.net/...

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

Session fixation

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

PT-2007-7230 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper JUNOS versions 7.3 through 8.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed BGP packets. This could be triggered by BGP UPDATE packets that cause session...

CVE-2007-6372: Improper Input Validation

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

OS Identification : Linux Distribution

This plugin attempts to identify the operating system type and version by looking at certain files on the remote operating system e.g., '/etc/redhat-release' on Red Hat. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25335;...

Juniper JunOS IPv6 DoS

Memory leak on specific IPv6 packet processing...

[SA21003] Juniper Networks JUNOS IPv6 Packet Handling Denial of Service

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

CVE-2006-3529

Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service kernel packet memory consumption and crash via crafted IPv6 packets whose buffers are not released after they are processed...