Juniper Junos IPv6 Egress Filter DoS (PSN-2013-04-915)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted IPv6 packets that match IPv6 egress filters with a discard or reject action on the lo0 interface can result in a memory leak. This can lead to MBUF exhaustion, resulting...

Juniper Junos J-Web Remote Code Execution (PSN-2013-04-914)

According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. When J-Web is enabled, authenticated users can execute arbitrary commands. This could allow an unprivileged user e.g., read only access to get complete administrative access. A remote...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497: Undefined Security Weakness

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Juniper Junos PIM Join Flood DoS (PSN-2013-01-808)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving a large number of specially crafted IPv4 or IPv6 PIM join messages in a Next-Generation Multicast VPN NGEN MVPN environment can cause the routing daemon to crash. C Tenable...

Juniper Junos Compliance Checks

Binary data junipercompliancecheck.nbin...

Juniper Junos ttymodem() DoS (PSN-2012-08-699)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A timing issue in ttymodem can cause the Junos kernel to crash whenever the device is accessed remotely e.g., telnet, SSH. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos OpenSSL ASN.1 Memory Corruption (PSN-2012-07-645)

According to its self-reported version number, the remote Junos router is using an outdated version of OpenSSL. Parsing malformed ASN.1 encoded data can result in memory corruption. This vulnerability can be triggered by attempting to parse untrusted data e.g., an X.509 certificate. C Tenable...

Juniper Junos ICMPv6 DoS (PSN-2012-07-644)

According to its self-reported version number, the remote Junos router has a denial of service vulnerability. Receiving an ICMPv6 packet with a corrupted payload within an IPv6 L3VPN can result in a kernel panic. Only VPNv6 configurations without the 'vrf-table-label' statement in the routing...

Juniper Junos J-Web XSS (PSN-2012-07-649)

According to its self-reported version number, the remote Junos device has a cross-site scripting vulnerability in the J-Web component. Unspecified input to index.php can result in cross-site scripting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59993;...

Juniper Junos load factory-default Privilege Escalation (PSN-2012-07-646)

According to its self-reported version number, the remote Junos device has a privilege escalation vulnerability. When the 'load factory-default' command fails in exclusive edit mode, the user is no longer subject to any command or configuration restrictions. C Tenable Network Security, Inc...

Juniper Junos SYN Cookie Protection DoS (PSN-2012-07-643)

According to its self-reported version number, the SYN cookie protection implementation of the remote Junos system has a denial of service vulnerability. If SYN flood protection is enabled and the SYN cookie protection threshold is exceeded, the server responds to connections with an RST, causing...

Juniper Junos PIM DoS (PSN-2012-07-648)

According to its self-reported version number, the remote router has a denial of service vulnerability. Sending a specially crafted broadcast storm of corrupt packets to the data multicast distribution tree port of a Junos router can cause the rpd daemon to hang. Only routers with PIM enabled in ...

Juniper Junos SSH TACACS+ Incorrect Permissions (PSN-2012-04-545)

According to its self-reported version number, the version of Junos running on the remote host may grant permissions incorrectly when SSH sessions are authenticated remotely using TACACS+ for authentication and authorization. Fetched authorizations are stored in a file whose name is based on...

Juniper Junos J-Web CPU Utilization DoS (PSN-2012-04-547)

According to its self-reported version number, the J-Web component of the remote Junos system has a denial of service vulnerability. A high rate of inbound HTTP connections over an extended period can result in high CPU utilization, even after the connections are terminated. A remote,...

Juniper Junos MPLS DoS (PSN-2012-04-546)

According to its self-reported version number, the version of Junos running on the remote host has a denial of service vulnerability. When MPLS is enabled, receiving a high rate of Pseudo Wire l2vpn or l2circuit control words from an adjacent node can cause the routing engine RE to become...

Juniper Junos BGP Multiple Remote DoS (PSN-2012-01-475)

According to its self-reported version number, the version of Junos running on the remote host has multiple denial of service vulnerabilities. Either of the following issues could result in an rpd crash : - Receipt of a malformed non-transitive BGP PATH attribute - An established session...

Juniper Junos Unsupported Version Detection

According to its self-reported version number, the installation of the Juniper Junos operating system running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain securi...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...

Juniper JunOS Malformed TCP Option

This module exploits a denial of service vulnerability in Juniper Network's JunOS router operating system. By sending a TCP packet with TCP option 101 set, an attacker can cause an affected router to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...