Juniper Junos Proxy ARP DoS (PSN-2013-04-913)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When Proxy ARP is enabled, specially crafted ARP packets can trigger a kernel crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network Security,...

Juniper Junos DNSSEC Validation DoS (PSN-2013-04-918)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When DNSSEC is enabled and validation is active, a high query load can cause the host to crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Design/Logic Flaw

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

CVE-2013-3497 affects Juniper Junos Space prior to 12.3P2.8 (JA1500 and related deployments). The vulnerability exposes cleartext passwords in a configuration tab, enabling reading by physically proximate attackers who view the workstation screen. Exploitation details are not provided in the docu...

PT-2013-4432

Name of the Vulnerable Software and Affected Versions Juniper Junos Space versions prior to 12.3P2.8 Description The issue allows physically proximate attackers to easily obtain a password by reading the workstation screen, as a cleartext password is included in a configuration tab. Recommendatio...

CVE-2013-3497: Undefined Security Weakness

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Juniper Junos Unspecified DoS (PSN-2013-01-818)

According to its self-reported version number, the remote Junos device has an unspecified denial of service vulnerability. A remote, unauthenticated attacker could exploit this by sending a specially crafted TCP packet, causing the host to crash. C Tenable Network Security, Inc...

Juniper Junos IPv6报文处理MBUF耗竭拒绝服务漏洞

Juniper Networks JUNOS是一款Juniper网络公司的系列边界路由器等所运行的操作系统 Juniper Junos存在一个缺陷可导致拒绝服务攻击，在处理某些IPv6报文过程中，检查与应用于lo0接口上IPv6 egress过滤器丢弃或者拒绝术语是否匹配时可触发此漏洞，允许远程攻击者利用漏洞耗竭MBUF，造成内核崩溃 0 Juniper JUNOS 10.4R11 Juniper JUNOS 11.4R5 Juniper JUNOS 12.1R4 Juniper JUNOS 12.2R1 厂商解决方案 Juniper JUNOS 10.4R12, 11.4R5-S3,...

Juniper's Junos Could Open Routers to TCP Attacks

UPDATE Some systems running older versions of Juniper Networks’ Junos OS software could be vulnerable to a transmission control protocol TCP flaw that can enable a hacker to crash and reboot certain routers. According to Australia’s IT News, an attacker could send a specially crafted TCP packet t...

Juniper Junos PIM Join Flood DoS (PSN-2013-01-808)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving a large number of specially crafted IPv4 or IPv6 PIM join messages in a Next-Generation Multicast VPN NGEN MVPN environment can cause the routing daemon to crash. C Tenable...

Juniper Junos J-Web URL Encoding Heap-Based Buffer Overflow (PSN-2013-01-807)

According to its self-reported version number, the remote Junos device has a heap-based buffer overflow in the J-Web component. Sending an unspecified request related to URL encoding can corrupt heap memory. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenabl...

Juniper Junos Compliance Checks

Binary data junipercompliancecheck.nbin...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Juniper Junos PIM Hello DoS (PSN-2012-10-732)

According to its self-reported version number, the remote Junos device could crash when processing a malformed PIM message. A remote, unauthenticated attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62712;...

Juniper Junos web-authentication Policy Not Enforced (PSN-2012-10-735)

According to its self-reported version number, the remote Junos device stops enforcing a web-authentication policy if its client-match statement is removed. This would allow unauthenticated access to resources that are assumed to be protected by web-authentication. C Tenable Network Security, Inc...

Juniper Junos ttymodem() DoS (PSN-2012-08-699)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A timing issue in ttymodem can cause the Junos kernel to crash whenever the device is accessed remotely e.g., telnet, SSH. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos J-Web XSS (PSN-2012-07-649)

According to its self-reported version number, the remote Junos device has a cross-site scripting vulnerability in the J-Web component. Unspecified input to index.php can result in cross-site scripting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59993;...

Juniper Junos UDP/IP DoS (PSN-2012-07-652)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. The flowd process may crash when reassembling UDP/IP fragments. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59996; scriptversion"1.8"; scriptcvsdate"Date:...