CVE-2014-6386

CVE-2014-6386 affects Juniper Networks Junos OS. A crafted BGP FlowSpec prefix in affected releases can trigger an assertion failure and restart the routing process daemon (rpd), causing a remote denial of service. Affected releases include Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12...

CVE-2014-6384

Juniper Junos OS TACACS+ configuration handling allows local privilege escalation due to improper processing of double quotes in authorization attributes. A local, authenticated user can bypass the security policy and execute commands via TACACS+ attributes in affected Junos releases (e.g., 12.1X...

CVE-2014-6384

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the...

Juniper Junos Remote Denial of Service Vulnerability (CNVD-2015-00383)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. Juniper Networks JUNOS fails to properly handle the BGP FlowSpec prefix, allowing an attacker to crash a routing program that can trigger assertion errors...

Juniper Junos Security Bypass Vulnerability (CNVD-2015-00384)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security bypass vulnerability exists in Juniper Junos, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Juniper Junos Local Elevation of Privilege Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A local elevation of privilege vulnerability exists in Juniper Junos, which allows a local attacker to exploit this vulnerability to elevate privileges...

Juniper Junos Denial of Service Vulnerability (CNVD-2015-00385)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A denial-of-service vulnerability exists in Juniper Junos, which can be exploited by attackers to cause affected devices to crash and deny service to legitimate users...

Juniper Junos JPPP Daemon Remote Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A vulnerability in the Juniper Networks JUNOS PPP backend program when using PPP authentication specially crafted for PAP authentication requests allows an attacker to exploit the...

Juniper Junos Space < 12.3P2.8 Password Disclosure (JSA10567)

According to its self-reported version number, the remote Junos Space version is prior to 12.3P2.8. It is, therefore, affected by a password disclosure vulnerability. When an authenticated user is viewing certain configuration pages in the interface, some passwords may be displayed in plaintext. ...

Juniper Junos Space Unsupported Release

According to its self-reported version number, the installation of Juniper Junos Space on the remote device is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C...

Juniper Junos Space < 14.1R1 Multiple Vulnerabilities (JSA10659)

According to its self-reported version number, the remote Junos Space version is prior to 14.1R1. It is, therefore, affected by multiple vulnerabilities in bundled third party software components : - Multiple vulnerabilities in the bundled OpenSSL CentOS package. CVE-2011-4109, CVE-2011-4576,...

Default Password (abc123) for 'admin' Account

The account 'admin' on the remote host has the default password 'abc123'. An attacker can leverage this issue to gain full access to the affected system. Note that Junos Space is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin";...

Juniper Junos Space < 13.3R1.8 Multiple Vulnerabilities (JSA10627)

According to its self-reported version number, the remote Junos Space version is prior to 13.3R1.8. It is, therefore, affected by multiple vulnerabilities in bundled third party software components : - Multiple vulnerabilities in RedHat JBoss application server. CVE-2010-0738, CVE-2010-1428,...

Juniper Junos Space < 13.1R1 MySQL Multiple Vulnerabilities (JSA10601)

According to its self-reported version number, the remote Junos Space version is prior to 13.1R1. It is, therefore, affected by multiple vulnerabilities related to the installed MySQL version. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80193; scriptversion"1.4";...

Juniper Junos Space < 13.3R1.8 Arbitrary Command Execution (JSA10626)

According to its self-reported version number, the remote Junos Space version is prior to 13.3R1.8. It is, therefore, affected by a remote command execution vulnerability that exists when the firewall is disabled. This could allow a remote attacker to execute arbitrary commands with root...

Juniper Junos Space 11.1x < 13.1R1.6 Multiple Vulnerabilities (JSA10585)

According to its self-reported version number, the remote Junos Space version is prior to 13.1R1.6. It is, therefore, affected by the following vulnerabilities : - Multiple Vulnerabilities related to the included Apache HTTP server. CVE-2011-3368, CVE-2011-4317, CVE-2012-0053 - A cross-site...

Juniper Networks Junos OS FPC DoS Vulnerability (JSA10655)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS RADIUS Unintended Authentication Vulnerability (JSA10654)

Juniper Networks Junos OS is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS BGP UPDATE DoS Vulnerability (JSA10653)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS Flowd DoS Vulnerability (JSA10650)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...