JVN#28436508: Juniper ScreenOS vulnerable to denial-of-service (DoS)

ScreenOS provided by Juniper Networks contains a denial-of-service DoS vulnerability. Impact When processing a malicious packet, the device may hang. Solution Enable the "Ping of Death Screen" Enable the "Ping of Death Screen" setting according to the information provided by the developer...

CVE-2013-6958: Undefined Security Weakness

Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet...

PT-2013-6198

Name of the Vulnerable Software and Affected Versions Juniper IDP affected versions not specified Description A cross-site scripting XSS issue exists in the web administrative component, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server...

CVE-2013-6957: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server...

PT-2013-6199

Name of the Vulnerable Software and Affected Versions Juniper NetScreen Firewall versions 5.4, 6.2, 6.3 Description The issue allows remote attackers to cause a denial of service via a crafted packet when the Ping of Death screen is disabled. Recommendations For versions 5.4, 6.2, 6.3, enable the...

Juniper Networks ScreenOS 拒绝服务漏洞

BUGTRAQ ID: 64260 CVECAN ID: CVE-2013-6958 ScreenOS是Netscreen防火墙安全解决方案所使用的操作系统。 ScreenOS 5.4, 6.2.0, 6.3.0版本中禁用了"Ping of Death"屏幕后，处理特制报文的实现上存在安全漏洞，成功利用后可导致拒绝服务。 0 Juniper Networks ScreenOS 6.3 Juniper Networks ScreenOS 6.2 厂商补丁： Juniper Networks ---------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Juniper Junos J-Web Sajax Remote Code Execution (JSA10560)

According to its self-reported version number, the remote Junos device is affected by a remote code execution vulnerability due to a lack of validation when passing input from the 'rs' parameter to the '/jsdm/ajax/port.php' script. Authenticated users, when J-Web is enabled, can execute arbitrary...

Juniper Networks Junos OS Buffer Overflow when Processing HTTP Messages

Buffer Overflow in flowd when processing HTTP protocol messages SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; i...

Juniper Networks Junos OS PIM Handling DoS Vulnerability

Certain PIM packets subject to NAT may cause the Flow Daemon to crash which can cause a DoS condition. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS OSPF Protocol Vulnerability

A vulnerability in the OSPF protocol allows a remote attacker to insert, update or delete routes in the OSPF database. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Juniper Junos J-Web - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Sense of Security - Security Advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating...

Juniper Networks Junos OS flowd Buffer Overflow Vulnerability

A buffer overflow in the flow daemon when using telnet pass-through authentication might lead to a complete compromise of the system. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Juniper NSM Servers < 2012.2R5 Multiple Vulnerabilities

According to the version of one or more Juniper NSM servers running on the remote host, it is potentially affected by the following vulnerabilities related to the included Apache Tomcat version : - An error exists related to handling requests containing several parameters that could allow denial ...

Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability

A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3

Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...

Juniper Networks Junos OS Security Issue with Proxy ARP Enabled

New builds of Junos OS software are available from Juniper. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

JunOS Web Login Cross Site Scripting Vulnerability

JunOS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper JunOS crossite scripting

Crossite scripting in EmbedThis...

Juniper Junos EmbedThis AppWeb error Parameter XSS

The version of Junos installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'error' parameter of the 'index.php' script. An attacker may be able to leverage this issue to inject arbitrary HTML and script co...

Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web

A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...