Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure

Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure source: https://www.securityfocus.com/bid/28037/info Juniper Networks Secure Access 2000 is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch...

Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure

source: https://www.securityfocus.com/bid/28037/info Juniper Networks Secure Access 2000 is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks. Secure Access 2000 5.5R1 Build 11711 is vulnerable...

Juniper Networks Secure Access 2000 - 'rdremediate.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28034/info Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Juniper Networks Secure Access 2000 - rdremediate.cgi Cross-Site Scripting

Juniper Networks Secure Access 2000 - rdremediate.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/28034/info Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverag...

ProCheckUp Security Advisory 2007.41

PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...

Juniper Networks JUNOS畸形BGP远程拒绝服务漏洞

BUGTRAQ ID: 26869 CNCAN ID:CNCAN-2007121801 Juniper Networks JUNOS是一款网络操作系统。 Juniper Networks JUNOS不正确处理特殊构建的BGP报文，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Juniper Networks JUNOS 8.4 Juniper Networks JUNOS 7.3 升级到JUNOS 8.5R1版本： http://www.juniper.net/...

Session fixation

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

CVE-2007-6372

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2007-6372: Improper Input Validation

Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...

PT-2007-7230 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper JUNOS versions 7.3 through 8.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed BGP packets. This could be triggered by BGP UPDATE packets that cause session...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

Ubuntu 6.06 LTS / 6.10 : ktorrent vulnerabilities (USN-436-1)

Bryan Burns of Juniper Networks discovered that KTorrent did not correctly validate the destination file paths nor the HAVE statements sent by torrent peers. A malicious remote peer could send specially crafted messages to overwrite files or execute arbitrary code with user privileges. Note that...

Ubuntu 6.06 LTS / 6.10 / 7.04 : ktorrent vulnerability (USN-436-2)

USN-436-1 fixed a vulnerability in KTorrent. The original fix for path traversal was incomplete, allowing for alternate vectors of attack. This update solves the problem. Bryan Burns of Juniper Networks discovered that KTorrent did not correctly validate the destination file paths nor the HAVE...

Heap overflow

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2007-5560

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2007-5560

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2007-5560

CVE-2007-5560 describes a heap-based buffer overflow in the Juniper HTTP Service that allows remote attackers to execute arbitrary code via a crafted HTTP packet. The underlying cause is a memory corruption failure within the service, leading to potential full system compromise (as indicated by t...

CVE-2007-5560: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...