Juniper Networks Junos OS Buffer Overflow when Processing HTTP Messages

Buffer Overflow in flowd when processing HTTP protocol messages SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; i...

Juniper Networks Junos OS PIM Handling DoS Vulnerability

Certain PIM packets subject to NAT may cause the Flow Daemon to crash which can cause a DoS condition. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS OSPF Protocol Vulnerability

A vulnerability in the OSPF protocol allows a remote attacker to insert, update or delete routes in the OSPF database. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Juniper Junos J-Web - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Sense of Security - Security Advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating...

Juniper Networks Junos OS flowd Buffer Overflow Vulnerability

A buffer overflow in the flow daemon when using telnet pass-through authentication might lead to a complete compromise of the system. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability

A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper JunOS crossite scripting

Crossite scripting in EmbedThis...

Juniper Networks Junos OS Security Issue with Proxy ARP Enabled

New builds of Junos OS software are available from Juniper. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3

Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...

Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web

A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Junos EmbedThis AppWeb error Parameter XSS

The version of Junos installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'error' parameter of the 'index.php' script. An attacker may be able to leverage this issue to inject arbitrary HTML and script co...

Juniper Networks Junos OS GNU libc GLOB_LIMIT DoS Vulnerability

Remote authenticated users can cause a partial denial of service via crafted glob expressions. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Junos J-Web - Privilege Escalation

Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating. Medium Impact. Privilege...

Juniper Junos J-Web - Privilege Escalation

Juniper Junos J-Web - Privilege Escalation Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affecte...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

Design/Logic Flaw

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

CVE-2013-6618 affects Juniper Junos J-Web (Sajax) via jsdm/ajax/port.php. The root cause is a lack of input validation in the Sajax handle client request that processes the rsargs parameter in an exec action, enabling remote authenticated users to execute arbitrary commands with administrative pr...

PT-2013-1298 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos versions prior to 10.4R13 Junos versions 11.4 before 11.4R7 Junos versions 12.1 before 12.1R5 Junos versions 12.2 before 12.2R3 Junos versions 12.3 before 12.3R1 Description: The issue allows remote authenticated users to execute...

CVE-2013-6012

Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does not properly handle configuration validation errors during the config commit phase of the boot-up sequence, which allows remote attackers to bypass authentication via unspecified...