CVE-2014-3813

CVE-2014-3813 affects Juniper ScreenOS (NetScreen Firewall) versions prior to 6.3.0r17, where the built-in DNS lookup client is vulnerable. The DoS can be triggered remotely, causing the device to crash or reboot via DNS lookup vectors. Evidence sources: Tenable plugin for ScreenOS 6.3

CVE-2014-3814

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service crash and reboot via a sequence of malformed packets to the device IP...

CVE-2014-3814

CVE-2014-3814 affects Juniper ScreenOS NetScreen Firewall devices (pre-6.3r17) with the internal DNS lookup client. A remote attacker can cause a denial of service (crash/reboot) by sending a sequence of malformed packets to the device IP, exploiting a DNS lookup handling flaw. Evidence in connec...

CVE-2014-3812

The CVE-2014-3812 issue affects Juniper Junos Pulse Secure Access Service (SSL VPN) IVE OS (<7.4r5) and 8.x (<8.0r1) and Junos Pulse Access Control Service (UAC) (<4.4r5) / 5.x (

CVE-2014-3813

Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service crash and reboot via vectors related to a DNS lookup...

CVE-2014-3812

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...

Juniper ScreenOS 5.4.x < 5.4.0r12 / 6.1.x / 6.2.x < 6.2.0r2 'about.html' Information Disclosure

The remote host is running a version of Juniper ScreenOS prior to 5.4.0r12 / 6.2.0r2. It is, therefore, affected by an information disclosure vulnerability due to system information being displayed in the 'about.html' page. A remote, unauthenticated attacker could leverage this information to aid...

Juniper ScreenOS 5.4 < 5.4.0r28 / 6.2 < 6.2.0r18 / 6.3 < 6.3.0r16 Malformed ICMP Echo Request DoS (JSA10604)

The remote host is running a version of Juniper ScreenOS prior to 5.4.0r28 / 6.2.0r18 / 6.3.0r16. It is, therefore, affected by a denial of service vulnerability due to a failure to properly handle ICMP echo request packets. A remote, unauthenticated attacker could potentially exploit this...

Juniper ScreenOS < 5.4.0r10 / 6.0 < 6.0.0r6 / 6.1 < 6.1.0r2 Web Interface and Telnet Login Pages XSS (JSA10388)

The remote host is running a version of Juniper ScreenOS prior to 5.4.0r10 / 6.0.0r6 / 6.1.0r2. It is, therefore, affected by a cross-site scripting vulnerability due to improperly sanitizing user input to the web interface and telnet login pages. An attacker could exploit this vulnerability by...

Juniper ScreenOS Device Detection

Binary data screenosversion.nbin...

Juniper ScreenOS 6.3 < 6.3.0r17 DoS

The remote host is running a version of Juniper ScreenOS 6.3 prior to 6.3.0r17. It is, therefore, affected by a denial of service vulnerability due to a failure to properly handle SSL/TLS protocol packets. A remote, unauthenticated attacker could potentially exploit this vulnerability by sending...

Juniper NSM Remote Code Execution (JSA10625)

The remote host has one or more instances of NSM Network and Security Manager Server running, with versions prior to 2012.2R8. It is, therefore, affected by a remote code execution vulnerability in the NSM XDB service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2014-3412

Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-3412

Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-3412

Juniper Junos Space up to version 13.3R1.8 is affected when the firewall is disabled. A remote attacker could execute arbitrary commands, potentially with root privileges, on affected installations. The Nessus entry confirms the condition (firewall disabled) and the affected range (before 13.3R1....

CVE-2014-3411

Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-3411

CVE-2014-3411 affects Juniper NSM XDB service prior to 2012.2R8. A remote attacker can connect to XDB via a remote debugger and execute arbitrary code within the Java service context, enabling remote code execution (no authentication required) and potentially leading to root privileges through a ...

CVE-2014-3411

Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors...