Design/Logic Flaw

The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to...

Design/Logic Flaw

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways ALGs are enabled, allows remote attackers to cause a denial of service daemon crash via crafted TCP packets, aka PRs 727980, 806269, and 83559...

CVE-2013-4685

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...

CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

CVE-2013-4687

CVE-2013-4687 affects Juniper Junos on SRX devices: the flowd daemon can crash when certain ALGs are enabled, triggered by crafted TCP packets. Affected versions are Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6. Impact is remote denial of service via daemon cr...

CVE-2013-4684

Concisely: CVE-2013-4684 affects Juniper Networks Junos OS on SRX devices where PIM and NAT are enabled. The Flow Daemon (flowd) can crash when processing specially crafted PIM packets, causing a denial of service. The OpenVAS NASL entry confirms the DoS via flowd crash; the patch path is labeled...

CVE-2013-4685

Juniper Junos OS contains a buffer overflow in flowd when processing HTTP messages (CVE-2013-4685). Affected are SRX devices with Captive Portal and UAC enforcer role across listed revisions: 10.4 before 10.4S14; 11.4 before 11.4R7; 12.1 before 12.1R6; and 12.1X44 before 12.1X44-D15. The vulnerab...

CVE-2013-4690

CVE-2013-4690 describes a memory-padding initialization flaw in Juniper Junos OS on SRX1400/3400/3600 platforms (versions listed) that can leak sensitive data by reading Ethernet-packet padding. The root cause is improper initialization of memory locations used during padding, enabling remote att...

CVE-2013-4687

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways ALGs are enabled, allows remote attackers to cause a denial of service daemon crash via crafted TCP packets, aka PRs 727980, 806269, and 83559...

CVE-2013-4684

flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service daemon crash via crafted PIM packets, aka PR 842253...

CVE-2013-4686

The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to...

CVE-2013-4688

flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service daemon crash via crafted MSRPC requests, aka PR 772834...

CVE-2013-4690

Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to...

CVE-2013-4686

Concretely affected product/versions: Juniper Junos kernel versions listed (10.4 before 10.4R14; 11.4 before 11.4R8; 11.4X27 before 11.4X27.43; 12.1 before 12.1R6; 12.1X44 before 12.1X44-D20; 12.2 before 12.2R4; 12.3 before 12.3R2). Vulnerability details: in certain VLAN configurations with unres...

Design/Logic Flaw

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

CVE-2013-3970 affects Juniper Junos Pulse Secure Access Service (SSL VPN) with IVE OS 7.0r2–7.0r8 and 7.1r1–7.1r5, and Junos Pulse Access Control Service (UAC) with UAC OS 4.1r1–4.1r5. The issue involves inadvertently including an internal/test CA certificate in the Trusted Server CAs list, which...

Junos Space WebUI Default Credentials

The Junos Space WebUI interface on the remote host has the 'super' user account secured with the default password. A remote, unauthenticated attacker could exploit this to gain administrative access to the web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Junos Space WebUI Detection

Junos Space is a network management solution used to automate management for Juniper hardware. Junos Space WebUI, the web interface for Junos Space, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66720; scriptversion"1.4";...

Juniper Junos Firewall Bypass DoS (PSN-2013-04-912)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. It is possible to bypass the firewall to create sessions for connections that should not be allowed by policy. A remote, untrusted attacker could exploit this to exhaust session resources...