Juniper Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Juniper Website - Cross Site Scripting Vulnerabilities Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 248 Product & Service Introduction: =============================== Networking and security solutio...

Juniper Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Juniper Website - Cross Site Scripting Vulnerabilities Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 248 Product & Service Introduction: =============================== Networking and security solutio...

Juniper Networks Junos OS Detection (SSH Login)

SSH login-based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Networks Junos OS CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a...

Juniper Networks Junos OS DoS Vulnerability (CVE-2004-0468)

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service DoS via certain IPv6 packets. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

ICMPv6 Router Announcement flooding denial of service affecting multiple systems

This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...

PT-2011-1209

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 8 through 11 Express Juniper SRX 240 affected versions not specified Description The issue allows remote attackers to affect availability, potentially causing a denial of service due to CPU and memory consumption. This...

Juniper VPN client unauthorized access

It's possible to execute Internet Explorer with System rights before authentication via remote session...

Juniper VPN client rdesktop clickhack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

Juniper VPN Client rdesktop Click Hack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

Juniper Secure Access crossite scripting

Multiple crossite scripting vulnerabilities...

Juniper SSL VPN Bypass / Cross Site Scripting

This reminded me of a bunch of problems I spotted in Juniper SSL VPN a while ago; they are apparently fixed, but I don't recall seeing any public vendor advisory / credit for reporting them - so here you go, even if just for the record... These were fixed by Juniper in IVE 6.3R1, 6.2R3, 6.1R5,...

ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability

ZDI-10-231: Juniper Secure Access Series meetingtestjava.cgi XSS Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-231 November 7, 2010 -- CVSS: 6.4, AV:N/AC:L/Au:N/C:P/I:P/A:N -- Affected Vendors: Juniper -- Affected Products: Juniper Secure Access Series -- TippingPointTM IPS...

some ooold Juniper bugs (was: [Full-disclosure] ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability)

This reminded me of a bunch of problems I spotted in Juniper SSL VPN a while ago; they are apparently fixed, but I don't recall seeing any public vendor advisory / credit for reporting them - so here you go, even if just for the record... These were fixed by Juniper in IVE 6.3R1, 6.2R3, 6.1R5,...

Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Juniper SA Series devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the meetingtestjava.cgi page which is used to test JVM compatibility. When...

NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================================================== NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit ==================================================================== / Exploit Title: NCP Secure Client...

PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability

PR09-16: Juniper Secure Access series Juniper IVE XSS Vulnerability found: 12th October 2009 Severity: Medium Script injection Description: There is a Cross-site Scripting vulnerability on Juniper, IVE web interface. Procheckup has found by making a malformed request to the IVE Web interface...

Juniper Secure Access crossite scripting

Administration interface crossite scripting...

ProCheckUp Security Advisory 2009.16

PR09-16: Juniper Secure Access series Juniper IVE XSS Vulnerability found: 12th October 2009 Severity: Medium Script injection Description: There is a Cross-site Scripting vulnerability on Juniper, IVE web interface. Procheckup has found by making a malformed request to the IVE Web interface...

CVE-2010-2288

Cross-site scripting XSS vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 Build 14599 and 6.5R2 Build 14951 allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie...