Design/Logic Flaw

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

CVE-2013-3970

CVE-2013-3970 affects Juniper Junos Pulse Secure Access Service (SSL VPN) with IVE OS 7.0r2–7.0r8 and 7.1r1–7.1r5, and Junos Pulse Access Control Service (UAC) with UAC OS 4.1r1–4.1r5. The issue involves inadvertently including an internal/test CA certificate in the Trusted Server CAs list, which...

Junos Space WebUI Detection

Junos Space is a network management solution used to automate management for Juniper hardware. Junos Space WebUI, the web interface for Junos Space, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66720; scriptversion"1.4";...

Juniper Junos Firewall Bypass DoS (PSN-2013-04-912)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. It is possible to bypass the firewall to create sessions for connections that should not be allowed by policy. A remote, untrusted attacker could exploit this to exhaust session resources...

Juniper Junos DNSSEC Validation DoS (PSN-2013-04-918)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When DNSSEC is enabled and validation is active, a high query load can cause the host to crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network...

Juniper Junos IPv6 Egress Filter DoS (PSN-2013-04-915)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted IPv6 packets that match IPv6 egress filters with a discard or reject action on the lo0 interface can result in a memory leak. This can lead to MBUF exhaustion, resulting...

Juniper Junos GRE DoS (PSN-2013-04-917)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted GRE packets received on a multicast tunnel interface that are allowed to reach the routing engine can cause the kernel to crash. An unauthenticated attacker on the same...

Juniper Junos J-Web Remote Code Execution (PSN-2013-04-914)

According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. When J-Web is enabled, authenticated users can execute arbitrary commands. This could allow an unprivileged user e.g., read only access to get complete administrative access. A remote...

Juniper Junos Invalid Ether-type DoS (PSN-2013-04-916)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving Ethernet packets with an invalid Ether-type can cause congestion on routers with line cards installed using Ichip-based FPCs and DPCs. An unauthenticated attacker on the same...

Juniper Junos Proxy ARP DoS (PSN-2013-04-913)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When Proxy ARP is enabled, specially crafted ARP packets can trigger a kernel crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network Security,...

Juniper Junos SIP DoS (PSN-2013-04-911)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When the SIP ALG feature is enabled, a specially crafted SIP packet can cause the flowd process to crash. A remote, unauthenticated attacker could exploit this to drop all existing networ...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3498

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

CVE-2013-3497 affects Juniper Junos Space prior to 12.3P2.8 (JA1500 and related deployments). The vulnerability exposes cleartext passwords in a configuration tab, enabling reading by physically proximate attackers who view the workstation screen. Exploitation details are not provided in the docu...

PT-2013-4433 · Juniper Networks · Juniper Smartpass Wlan Security Management

Name of the Vulnerable Software and Affected Versions: Juniper SmartPass WLAN Security Management versions prior to 7.7 MR3 Juniper SmartPass WLAN Security Management versions prior to 8.0 MR2 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or...

CVE-2013-3498

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...