CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3498

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

CVE-2013-3497 affects Juniper Junos Space prior to 12.3P2.8 (JA1500 and related deployments). The vulnerability exposes cleartext passwords in a configuration tab, enabling reading by physically proximate attackers who view the workstation screen. Exploitation details are not provided in the docu...

CVE-2013-3498: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4433 · Juniper Networks · Juniper Smartpass Wlan Security Management

Name of the Vulnerable Software and Affected Versions: Juniper SmartPass WLAN Security Management versions prior to 7.7 MR3 Juniper SmartPass WLAN Security Management versions prior to 8.0 MR2 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or...

CVE-2013-3498

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3497: Undefined Security Weakness

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3498

The CVE-2013-3498 entry describes a cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management prior to versions 7.7 MR3 and 8.0 prior to MR2, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Juniper SmartPass ...

Juniper Junos Unspecified DoS (PSN-2013-01-818)

According to its self-reported version number, the remote Junos device has an unspecified denial of service vulnerability. A remote, unauthenticated attacker could exploit this by sending a specially crafted TCP packet, causing the host to crash. C Tenable Network Security, Inc...

Chris Hoff Discusses His Early Days of Hacking and Security

Dennis Fisher talks with Chris Hoff of Juniper Networks about his childhood scaring sheep on a farm in New Zealand, his early days hacking on the first wave of personal computers, his misadventures in a college computer lab and how he ended up as an itinerant security guy. Download: 05chrishoff.m...

Juniper Junos IPv6报文处理MBUF耗竭拒绝服务漏洞

Juniper Networks JUNOS是一款Juniper网络公司的系列边界路由器等所运行的操作系统 Juniper Junos存在一个缺陷可导致拒绝服务攻击，在处理某些IPv6报文过程中，检查与应用于lo0接口上IPv6 egress过滤器丢弃或者拒绝术语是否匹配时可触发此漏洞，允许远程攻击者利用漏洞耗竭MBUF，造成内核崩溃 0 Juniper JUNOS 10.4R11 Juniper JUNOS 11.4R5 Juniper JUNOS 12.1R4 Juniper JUNOS 12.2R1 厂商解决方案 Juniper JUNOS 10.4R12, 11.4R5-S3,...

Default Password (abc123) for 'root' Account

The account 'root' on the remote host has the password 'abc123'. An attacker may leverage this issue to gain full access to the affected system. Note that Junos Space is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password =...

CVE-2012-1038

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...

CVE-2012-1038: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...

CVE-2012-1038

CVE-2012-1038 describes a cross-site scripting (XSS) vulnerability in Juniper Networks Mobility System Software (MSS) WebAAA login (wba_login.html). The issue arises in MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions prior to 7.4 and 7.3, where a cra...

CVE-2012-1038

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...