6618 matches found
CVE-2014-3814
CVE-2014-3814 affects Juniper ScreenOS NetScreen Firewall devices (pre-6.3r17) with the internal DNS lookup client. A remote attacker can cause a denial of service (crash/reboot) by sending a sequence of malformed packets to the device IP, exploiting a DNS lookup handling flaw. Evidence in connec...
CVE-2014-3813
Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service crash and reboot via vectors related to a DNS lookup...
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...
Juniper ScreenOS 5.4 < 5.4.0r28 / 6.2 < 6.2.0r18 / 6.3 < 6.3.0r16 Malformed ICMP Echo Request DoS (JSA10604)
The remote host is running a version of Juniper ScreenOS prior to 5.4.0r28 / 6.2.0r18 / 6.3.0r16. It is, therefore, affected by a denial of service vulnerability due to a failure to properly handle ICMP echo request packets. A remote, unauthenticated attacker could potentially exploit this...
Juniper ScreenOS 5.4.x < 5.4.0r12 / 6.1.x / 6.2.x < 6.2.0r2 'about.html' Information Disclosure
The remote host is running a version of Juniper ScreenOS prior to 5.4.0r12 / 6.2.0r2. It is, therefore, affected by an information disclosure vulnerability due to system information being displayed in the 'about.html' page. A remote, unauthenticated attacker could leverage this information to aid...
Juniper ScreenOS < 5.4.0r10 / 6.0 < 6.0.0r6 / 6.1 < 6.1.0r2 Web Interface and Telnet Login Pages XSS (JSA10388)
The remote host is running a version of Juniper ScreenOS prior to 5.4.0r10 / 6.0.0r6 / 6.1.0r2. It is, therefore, affected by a cross-site scripting vulnerability due to improperly sanitizing user input to the web interface and telnet login pages. An attacker could exploit this vulnerability by...
Juniper ScreenOS Device Detection
Binary data screenosversion.nbin...
Juniper ScreenOS 6.3 < 6.3.0r17 DoS
The remote host is running a version of Juniper ScreenOS 6.3 prior to 6.3.0r17. It is, therefore, affected by a denial of service vulnerability due to a failure to properly handle SSL/TLS protocol packets. A remote, unauthenticated attacker could potentially exploit this vulnerability by sending...
Juniper NSM Remote Code Execution (JSA10625)
The remote host has one or more instances of NSM Network and Security Manager Server running, with versions prior to 2012.2R8. It is, therefore, affected by a remote code execution vulnerability in the NSM XDB service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2014-3412
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
Design/Logic Flaw
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2014-3412
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2014-3412
Juniper Junos Space up to version 13.3R1.8 is affected when the firewall is disabled. A remote attacker could execute arbitrary commands, potentially with root privileges, on affected installations. The Nessus entry confirms the condition (firewall disabled) and the affected range (before 13.3R1....
CVE-2014-3411
Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2014-3411
CVE-2014-3411 affects Juniper NSM XDB service prior to 2012.2R8. A remote attacker can connect to XDB via a remote debugger and execute arbitrary code within the Java service context, enabling remote code execution (no authentication required) and potentially leading to root privileges through a ...
CVE-2014-3411
Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...
Juniper ScreenOS is vulnerable to a denial of service from malformed SSL packets
Overview Juniper ScreenOS 6.3, and possibly earlier versions, is vulnerable to a denial of service from malformed SSL packets. Description Juniper ScreenOS 6.3, and possibly earlier versions, is vulnerable to a denial of service from malformed SSL packets. Additional details may be found in Junip...
MS KB2962393: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (Heartbleed)
The remote host is missing KB2962393, which resolves an OpenSSL information disclosure vulnerability Heartbleed in the Juniper VPN client software shipped with Windows 8.1. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid73865; scriptversion"1.17";...
