PT-2015-3858

Name of the Vulnerable Software and Affected Versions Juniper vSRX versions prior to 15.1X49-D20 Description The issue allows remote attackers to cause a denial of service, resulting in a system reboot, via unspecified vectors. Recommendations For versions prior to 15.1X49-D20, update to version...

Network based denial of service vulnerability in ScreenOS

A vulnerability in ScreenOS L2TP packet processing may allow a remote network based attacker to cause a denial of service condition on ScreenOS devices by sending a crafted L2TP packet. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

PT-2015-3856

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X44-D50 Juniper Junos OS version 12.1X46 prior to 12.1X46-D35 Juniper Junos OS version 12.1X47 prior to 12.1X47-D25 Juniper Junos OS version 12.3 prior to 12.3R10 Juniper Junos OS version 12.3X48 prior to...

Juniper Networks Junos Space Detection (SSH Login)

SSH login-based detection of Juniper Networks Junos Space. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10698)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-6450: Improper Restriction of Operations within the Bounds of a Memory Buffer

Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/D15, 12.2 before 12.2R9, 12.2X50 before 12.2X50-D70, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 12.3X50 before 12.3X50-D42, 13.1 before 13.1R4-S3, 13.1X49 before 13.1X49-D42...

CVE-2015-7322

The CVE-2015-7322 issue affects Pulse Connect Secure’s Secure Meeting (Pulse Collaboration). Affected releases expose different join-meeting messages based on meeting status, enabling remote attackers to enumerate valid meeting IDs by issuing a sequence of requests. This is an information-disclos...

Junos Pulse Secure Meeting 8.0.5 Access Bypass

Profundis Labs Security Advisory https://profundis-labs.com/advisories/CVE-2015-7323.txt Product: ================================ Junos Pulse Secure Meeting Secure Meeting is a part of the Junos Puls Collaboration software, which allows you to organize and holding virtual meetings with internal...

CVE-2015-5369

Pulse Connect Secure (PCS) devices with Hardware Acceleration enabled are affected by CVE-2015-5369 due to improper validation of the TLS Finished handshake, enabling MITM via a crafted Finished message. Affected lines include PCS 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 ...

Juniper Pulse Secure TCP Hardware Acceleration User Data Access Vulnerability

Juniper Networks' Secure Access is an enterprise-grade SSL VPN access device, and the operating system running on the device is Juniper IVE OS. A security vulnerability in Juniper Pulse Secure TCP Hardware Acceleration allows remote users to exploit a TCP handshake checksum vulnerability which, i...

Juniper Junos bfdd RCE (JSA10690)

According to its self-reported version number, the remote Juniper Junos device is affected by a remote code execution vulnerability in the BFD daemon bfdd. A remote attacker, using a specially crafted BFD packet, can exploit this to cause a denial of service or execute arbitrary code. Note that...

Juniper Junos BGP-VPLS Advertisements RPD DoS (JSA10687)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP-VPLS advertisements with updated BGP local preference values. A remote attacker can exploit this to crash RDP with a NULL pointer deferen...

Juniper Junos IPv6 sendd DoS (JSA10688)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in sendd due to improper handling of IPv6 Secure Neighbor Discovery SEND Protocol packets when the Secure Neighbor Discovery feature is configured. A remote attacker,...

Juniper Junos J-Web Multiple Vulnerabilities (JSA10682)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities in the J-Web component : - A cross-site scripting vulnerability exists due to a failure to validate input before returning it to users. A remote attacker, using a crafted request...

Juniper Junos SRX Series 'set system ports console insecure' Local Privilege Escalation (JSA10683)

According to its self-reported version number, the remote Juniper Junos SRX Series device is affected by a privilege escalation vulnerability related to the 'set system ports console insecure' feature. A local attacker can exploit this vulnerability by using access to a console port to gain full...

Juniper Junos LAST_ACK State DoS (JSA10686)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to the improper handling of TCP connection transitions to the LASTACK state when the device has more data to send. A remote attacker can exploit this cause the socke...

Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685) (credentialed check)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R9. It is, therefore, affected by multiple vulnerabilities in the bundled version of Apache HTTP Server : - A flaw exists due to improper escaping of filenames in 406 and 300 HTTP responses. A...

Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R9. It is, therefore, affected by multiple vulnerabilities in the bundled version of Apache HTTP Server : - A flaw exists due to improper escaping of filenames in 406 and 300 HTTP responses. A...

Juniper Junos IPv6 SEND Handling Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A denial of service vulnerability exists in IPv6 sendd in Juniper Networks Junos. When the program is configured with the 'set protocols neighbor-discovery secure security-level default'...

CVE-2015-5363

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...