CVE-2013-6013

CVE-2013-6013 affects Juniper Junos flowd on SRX devices, where a buffer overflow in the flow daemon may allow remote code execution via a crafted Telnet message when telnet pass-through authentication is enabled. Affected versions include Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X4...

CVE-2013-6015

The CVE describes a Denial of Service in Juniper Junos SRX Series flowd when a plugin using TCP proxy is configured. Affected versions include Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15. The issue arises from handli...

CVE-2013-6015

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service flow daemon crash via an...

CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...

CVE-2013-6170

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN NGEN MVPN environment, allows remote attackers to cause a denial of service RPD routing daemon crash via a large number of crafted PIM S,G...

CVE-2013-6013

Buffer overflow in the flow daemon flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a...

CVE-2013-4689

CVE-2013-4689 affects Juniper Junos J-Web, where CSRF protection can be bypassed to hijack administrator authentication. Affected Junos releases include before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before...

CVE-2013-6170

CVE-2013-6170 affects Juniper Networks Junos OS (Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1) in a Next-Generation Multicast VPN (NGEN MVPN) environment. The vulnerability arises from handling a large number of crafted PIM (S,G) jo...

Juniper Junos SRX Series flowd telnet Messages Remote Code Execution (JSA10594)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a remote code execution vulnerability. A remote attacker can send specially crafted Telnet messages to cause a buffer overflow the flow daemon flowd. Note that this issue only affects devices...

Juniper Junos SRX Series flowd Remote DoS (JSA10596)

According to its self-reported version number, the remote Juniper Junos SRX-series device has a denial of service vulnerability related to processing particular TCP packet sequences. A remote attacker can exploit this issue to cause the flow daemon flowd to crash. Note that this issue only affect...

Juniper Junos SRX Series Unauthenticated Access (JSA10593)

According to its self-reported version number, the remote Juniper Junos SRX series device may be affected by an unauthenticated access vulnerability. A configuration validation error may exist when upgrading that leaves the device with a partial configuration when the 'no-validate' option is used...

Juniper Junos Unnumbered Interface Cache Poisoning Remote DoS and Information Disclosure (JSA10595)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service and information disclosure vulnerabilities. An adjacent attacker can poison the ARP cache and create a bogus forwarding table entry for an IP address, effectively creating a denial of...

Juniper Junos PIM Remote Denial of Service (JSA10548)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A flaw in the way in which the Next-Generation Multicast VPN NGEN MVPN environment process large numbers of specifically crafted PIM join messages can cause the RPD routing daemon to cras...

Juniper Junos J-Web CSRF Protection Bypass (JSA10597)

According to its self-reported version number, the remote Juniper Junos device has a cross-site request forgery XSRF vulnerability in J-Web. Successful exploitation of this issue could allow an attacker to take complete control of the device. TRUSTED...

Juniper Junos GNU libc glob Remote DoS (JSA10598)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in the glob implementation in libc. An authenticated, remote attacker can exploit this, via a crafted glob expression that does not match any pathnames, to...

Juniper Networks Junos OS DNSSEC validation Denial of Service

Heavy DNSSEC validation load can cause assertion failure in Bind of Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS Detection (SNMP)

SNMP based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) Multiple XSS (JSA10589)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by multiple unspecified cross-site scripting vulnerabilities that are present on the login and support pages hosted on the device's web server. An attacke...

Junos Pulse Secure IVE / UAC OS DoS (JSA10590)

According to its self-reported version, the version of IVE / UAC OS running on the remote host may be affected by an unspecified denial of service vulnerability that can be triggered by sending a specially crafted packet to the device. A system restart is required to bring the device back into...

CVE-2013-5650

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...