CVE-2009-5086

Cross-site scripting XSS vulnerability in Appliance Configuration Manager ACM in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5086

CVE-2009-5086 concerns an XSS vulnerability in Juniper IDP ACM (Appliance Configuration Manager). Affected are IDP versions prior to 4.1r3 and prior to 4.2r1, where an attacker can inject arbitrary web script or HTML via unspecified vectors in the ACM web interface. The practical impact is that a...

CVE-2009-5086

Cross-site scripting XSS vulnerability in Appliance Configuration Manager ACM in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Juniper Networks IDP ACM vulnerable to cross-site scripting

Overview Juniper Networks IDP ACM Appliance Configuration Manager contains a cross-site scripting vulnerability. Juniper Networks IDP ACM provides a web interface for changing configurations in the IDP. The ACM contains a cross-site scripting vulnerability. Taketo Ikeuchi of Hitachi Solutions, Lt...

JVN#44642341: Juniper Networks IDP ACM vulnerable to cross-site scripting

Juniper Networks IDP ACM provides a web interface for changing configurations in the IDP. The ACM contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...

Juniper Junos Multiple sfid Daemon Malformed Packet Remote DoS (PSN-2011-04-241)

The remote device is a Juniper EX Series switch running Junos 11.1R1. The sfid daemon on the line card may crash repeatedly due to improper parsing of NetBIOS packets. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos Extended DHCP Relay Agent Traffic Redirection (PSN-2011-07-300)

According to its self-reported version number, the remote Juniper router has a vulnerable Extended DHCP Relay Agent. Any interface which has the Extended DHCP Relay Agent enabled intercepts unicast DHCP reply packets. A remote attacker could exploit this by acting as a malicious DHCP server,...

Juniper Junos Unsupported Version Detection

According to its self-reported version number, the installation of the Juniper Junos operating system running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain securi...

Juniper Junos J-Web Weak SSL Ciphers (PSN-2011-01-147)

According to its self-reported version number, the remote Junos device contains a J-Web component that supports the use of weak SSL ciphers less than 128-bit. Note: This is considerably easier to exploit if the attacker is on the same physical network. C Tenable Network Security, Inc...

Juniper Junos Fragmented ICMP Packet Handling Remote DoS (PSN-2011-07-298)

According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Receiving a burst of fragmented ICMP packets can cause the router to become unresponsive until it is rebooted. A remote, unauthenticated attacker could...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...

Junos Version Detection

The remote host is running Junos, an operating system for Juniper devices. It is possible to read the Junos version number by logging into the device via SSH, using SNMP, or viewing the web interface. TRUSTED...

Juniper Junos PIM rpd Crafted Boot Message Remote DoS (PSN-2011-07-296)

According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Sending a specially crafted bootstrap message to the PIM router can cause the rpd routing daemon to crash. A remote, unauthenticated attacker could exploi...

Juniper Junos ICMP Ping 'composite next-hop' Remote DoS (PSN-2011-07-297)

According to its self-reported version number, the remote Juniper router is running a version of Junos that is affected by a denial of service vulnerability. Sending an ICMP ping with the record-route or timestamp options can crash an L3VPN PE router with either of the following configurations : ...

Juniper Junos IPv6 over IPv4 Security Policy Bypass (PSN-2011-07-299)

According to its self-reported version number, the remote Juniper device is running a version of Junos with a security bypass vulnerability. When the device is configured to perform IPv6 in IPv4 tunneling, policies that apply to the encapsulated datagram are not enforced. A remote, unauthenticate...

Juniper Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Juniper Website - Cross Site Scripting Vulnerabilities Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 248 Product & Service Introduction: =============================== Networking and security solutio...

Juniper Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Juniper Website - Cross Site Scripting Vulnerabilities Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 248 Product & Service Introduction: =============================== Networking and security solutio...

Juniper Networks Junos OS DoS Vulnerability (CVE-2004-0468)

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service DoS via certain IPv6 packets. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Juniper Networks Junos OS Detection (SSH Login)

SSH login-based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Networks Junos OS CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a...