Juniper Junos host-inbound-traffic Implicit Allow (PSN-2012-07-653)

According to its self-reported version number, the remote Junos device allows inbound SSH traffic even when 'host-inbound-traffic' is not explicitly configured to allow it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59997; scriptversion"1.9"; scriptcvsdate"Date:...

Juniper Junos SSH TACACS+ Incorrect Permissions (PSN-2012-04-545)

According to its self-reported version number, the version of Junos running on the remote host may grant permissions incorrectly when SSH sessions are authenticated remotely using TACACS+ for authentication and authorization. Fetched authorizations are stored in a file whose name is based on...

Juniper Junos Key Generation Weakness (PSN-2012-04-549)

According to its self-reported version and model number, the remote Junos device generates weak cryptographic keys for SSL and SSH. Due to a lack of entropy in the initial certificate creation, duplicate keys may be created on multiple devices. An attacker with knowledge of these keys would allow...

Juniper Junos MPLS DoS (PSN-2012-04-546)

According to its self-reported version number, the version of Junos running on the remote host has a denial of service vulnerability. When MPLS is enabled, receiving a high rate of Pseudo Wire l2vpn or l2circuit control words from an adjacent node can cause the routing engine RE to become...

Juniper Junos J-Web CPU Utilization DoS (PSN-2012-04-547)

According to its self-reported version number, the J-Web component of the remote Junos system has a denial of service vulnerability. A high rate of inbound HTTP connections over an extended period can result in high CPU utilization, even after the connections are terminated. A remote,...

Juniper Junos SRX Series for the Data Center Memory Corruption (PSN-2012-04-548)

According to its self-reported version and model number, the version of Junos running on the remote host has a memory corruption vulnerability. When an IPv6 flow session is freed on the Central Point CP, CP session statistics are updated. In some situations this update results in memory corruptio...

Juniper Junos BGP UPDATE Malformed ATTR_SET Attribute Remote DoS (PSN-2012-01-472)

According to its self-reported version number, the version of Junos running on the remote device has a denial of service vulnerability. Processing a BGP UPDATE containing a corrupted ATTRSET attribute can result in an rpd crash. This issue only affects routers configured for BGP running Junos 10....

Juniper Junos J-Web Component Unspecified CSRF (PSN-2012-01-474)

According to its self-reported version number, the J-Web component of the remote Juniper device has a cross-site request forgery vulnerability. A remote attacker could exploit this by tricking a user into making a maliciously crafted request, resulting in a compromise of the device. C Tenable...

Juniper Junos MGD-CLI Arbitrary Command Execution (PSN-2011-11-418)

According to its self-reported version number, the version of Junos running on the remote device has a command execution vulnerability. A flaw in the logical model governing inter-process communications between the management daemon MGD and the command-line interpreter CLI could result in arbitra...

Juniper Junos BGP Multiple Remote DoS (PSN-2012-01-475)

According to its self-reported version number, the version of Junos running on the remote host has multiple denial of service vulnerabilities. Either of the following issues could result in an rpd crash : - Receipt of a malformed non-transitive BGP PATH attribute - An established session...

Juniper Junos Next-Gen MVPN Senario Malformed Message Handling Remote DoS (PSN-2011-10-391)

According to its self-reported version number, the remote Juniper router has a denial of service vulnerability. In a Next Generation MVPN scenario, a kernel memory buffer could get corrupted when the router receives a bootstrap or auto-RP message larger than 204 bytes, causing the kernel to crash...

Juniper Junos J-Web Administrator Logs XSS (PSN-2011-10-392)

According to its self-reported version number, the J-Web component of the remote Juniper device has a persistent cross-site scripting vulnerability. During the authentication process, user controlled input is added to the administrator logs. When an administrator reviews the logs, that user...

Juniper Junos MPC Malformed Route Prefix Remote DoS (PSN-2011-08-327)

According to its self-reported version number, the remote Juniper router has a denial of service vulnerability. Receiving specific route prefix install/delete actions e.g., a BGP routing update can cause the router to crash. This issue only affects MX Series routers with port concetrators based o...

Juniper Junos Unsupported Version Detection

According to its self-reported version number, the installation of the Juniper Junos operating system running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain securi...

Juniper Junos Multiple sfid Daemon Malformed Packet Remote DoS (PSN-2011-04-241)

The remote device is a Juniper EX Series switch running Junos 11.1R1. The sfid daemon on the line card may crash repeatedly due to improper parsing of NetBIOS packets. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos J-Web Weak SSL Ciphers (PSN-2011-01-147)

According to its self-reported version number, the remote Junos device contains a J-Web component that supports the use of weak SSL ciphers less than 128-bit. Note: This is considerably easier to exploit if the attacker is on the same physical network. C Tenable Network Security, Inc...

Juniper Junos Fragmented ICMP Packet Handling Remote DoS (PSN-2011-07-298)

According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Receiving a burst of fragmented ICMP packets can cause the router to become unresponsive until it is rebooted. A remote, unauthenticated attacker could...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...

Juniper Junos IPv6 over IPv4 Security Policy Bypass (PSN-2011-07-299)

According to its self-reported version number, the remote Juniper device is running a version of Junos with a security bypass vulnerability. When the device is configured to perform IPv6 in IPv4 tunneling, policies that apply to the encapsulated datagram are not enforced. A remote, unauthenticate...

Juniper Junos PIM rpd Crafted Boot Message Remote DoS (PSN-2011-07-296)

According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Sending a specially crafted bootstrap message to the PIM router can cause the rpd routing daemon to crash. A remote, unauthenticated attacker could exploi...