CVE-2013-4687

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways ALGs are enabled, allows remote attackers to cause a denial of service daemon crash via crafted TCP packets, aka PRs 727980, 806269, and 83559...

CVE-2013-4684

Concisely: CVE-2013-4684 affects Juniper Networks Junos OS on SRX devices where PIM and NAT are enabled. The Flow Daemon (flowd) can crash when processing specially crafted PIM packets, causing a denial of service. The OpenVAS NASL entry confirms the DoS via flowd crash; the patch path is labeled...

CVE-2013-4690

Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to...

CVE-2013-4686: Undefined Security Weakness

The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to...

CVE-2013-4687: Undefined Security Weakness

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways ALGs are enabled, allows remote attackers to cause a denial of service daemon crash via crafted TCP packets, aka PRs 727980, 806269, and 83559...

PT-2013-5137

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4S14 Junos versions 11.2 and 11.4 prior to 11.4R6-S2 Junos versions 12.1 prior to 12.1R6 on SRX devices Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via...

CVE-2013-4690: Undefined Security Weakness

Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to...

PT-2013-5139

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 10.4 before 10.4S13 Juniper Junos versions 11.4 before 11.4R7-S1 Juniper Junos versions 12.1 before 12.1R5-S3 Juniper Junos versions 12.1X44 before 12.1X44-D20 Juniper Junos versions 12.1X45 before 12.1X45-D10 Descriptio...

PT-2013-5135

Name of the Vulnerable Software and Affected Versions Junos versions 10.4 before 10.4S14 Junos versions 11.4 before 11.4R7 Junos versions 12.1 before 12.1R6 Junos versions 12.1X44 before 12.1X44-D15 Description A buffer overflow issue in flowd in Junos, when Captive Portal is enabled with the UAC...

PT-2013-5134

Name of the Vulnerable Software and Affected Versions Junos versions 10.4 through 10.4S13 Junos versions 11.4 through 11.4R7 Junos versions 12.1 through 12.1R6 Junos versions 12.1X44 through 12.1X44-D14 Description The issue allows remote attackers to cause a denial of service, resulting in a...

CVE-2013-4684: Undefined Security Weakness

flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service daemon crash via crafted PIM packets, aka PR 842253...

PT-2013-5138

Name of the Vulnerable Software and Affected Versions Junos version 10.4 before 10.4R11 on SRX devices Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted MSRPC requests when the MSRPC Application Layer Gateway ALG is enabled...

CVE-2013-4688: Undefined Security Weakness

flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service daemon crash via crafted MSRPC requests, aka PR 772834...

CVE-2013-4685: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...

PT-2013-5136

Name of the Vulnerable Software and Affected Versions Junos versions 10.4 through 10.4R13 Junos versions 11.4 through 11.4R7 Junos versions 11.4X27 through 11.4X27.42 Junos versions 12.1 through 12.1R5 Junos versions 12.1X44 through 12.1X44-D19 Junos versions 12.2 through 12.2R3 Junos versions 12...

Design/Logic Flaw

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

CVE-2013-3970 affects Juniper Junos Pulse Secure Access Service (SSL VPN) with IVE OS 7.0r2–7.0r8 and 7.1r1–7.1r5, and Junos Pulse Access Control Service (UAC) with UAC OS 4.1r1–4.1r5. The issue involves inadvertently including an internal/test CA certificate in the Trusted Server CAs list, which...

CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

PT-2013-4766

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.0r2 through 7.0r8 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.1r1 through 7.1r5 Juniper Junos Pulse Access Control Service aka UAC versions 4.1r1 through 4.1...

CVE-2013-3970: Undefined Security Weakness

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...