282 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...
CVE-2008-6096
Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...
CVE-2008-6096
Juniper ScreenOS prior to 5.4.0r10, 6.0.0r6, and 6.1.0r2 is vulnerable to cross-site scripting due to improper sanitization of user input on the web interface and telnet login pages. The issue allows an attacker to inject arbitrary script via the username field on login, potentially affecting use...
CVE-2008-6096: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...
Juniper Netscreen Firewall ScreenOS crossite scripting
Persistant crossite scripting with username stored in logs...
Layered Defense Research Advisory: Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection
================================================== Layered Defense Research Advisory 1 October 2008 ================================================== 1 Affected Product Juniper Netscreen Firewall ScreenOS version 5.4.0r9.0 ================================================== 2 Severity Rating: Low...
CVE-2002-2266
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...
CVE-2002-2266
CVE-2002-2266 affects NetScreen ScreenOS versions 2.8 through 4.0. The issue occurs when forwarding H.323 or Netmeeting traffic, where remote attackers can trigger a denial of service by establishing multiple half‑open H.323 sessions that are not cleaned up and do not time out for 36 hours, leadi...
CVE-2002-2266: Undefined Security Weakness
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...
CVE-2002-2234
NetScreen ScreenOS pre-4.0.1 is affected: remote attackers can bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests. The available documents confirm the vulnerability and affected version, but do not provide remediation steps or exploit details.
CVE-2002-2234
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests...
CVE-2002-2234: Undefined Security Weakness
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests...
CVE-2002-2223
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...
CVE-2002-2223
The CVE-2002-2223 entry concerns a buffer overflow in NetScreen-Remote 8.0. An attacker could trigger a denial of service and, possibly, remote code execution by sending crafted Internet Key Exchange (IKE) response packets. The exploit vectors involve (1) a large Security Parameter Index (SPI) fi...
CVE-2002-2223: Undefined Security Weakness
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...
Netscreen VPN Detection
Binary data 3602.prm...
Netscreen VPN Detection
Binary data 3607.prm...
Netscreen VPN Detection
Binary data 3610.prm...