CVE-2014-6385

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows...

CVE-2014-6384

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the...

CVE-2014-6383

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule...

Design/Logic Flaw

Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial o...

Authentication flaw

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows...

Authorization

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the...

Design/Logic Flaw

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule...

CVE-2014-6385

CVE-2014-6385 affects Juniper Junos OS (versions listed in the CVE) and can allow a remote adjacent attacker to cause a denial of service by processing crafted fragmented OSPFv3 packets with an IPsec AH. The connected Nessus/NVD/OpenVAS entries corroborate a fragmentation-based DoS affecting Juno...

CVE-2014-6383

CVE-2014-6383 concerns Juniper Networks Junos OS where the stateless firewall on Trio-based PFE modules did not properly match ports, enabling a remote attacker to bypass firewall rules. Affected versions include Junos 13.3R3, 14.1R1, and 14.1R2. The underlying cause is faulty port matching in th...

CVE-2014-6385

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows...

CVE-2014-6383

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule...

CVE-2014-6386

CVE-2014-6386 affects Juniper Networks Junos OS. A crafted BGP FlowSpec prefix in affected releases can trigger an assertion failure and restart the routing process daemon (rpd), causing a remote denial of service. Affected releases include Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12...

CVE-2014-6384

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 does not properly handle double quotes in authorization attributes in the...

CVE-2014-6384

Juniper Junos OS TACACS+ configuration handling allows local privilege escalation due to improper processing of double quotes in authorization attributes. A local, authenticated user can bypass the security policy and execute commands via TACACS+ attributes in affected Junos releases (e.g., 12.1X...

Juniper Junos Security Bypass Vulnerability (CNVD-2015-00384)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security bypass vulnerability exists in Juniper Junos, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Juniper Junos Remote Denial of Service Vulnerability (CNVD-2015-00383)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. Juniper Networks JUNOS fails to properly handle the BGP FlowSpec prefix, allowing an attacker to crash a routing program that can trigger assertion errors...

Juniper Junos Local Elevation of Privilege Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A local elevation of privilege vulnerability exists in Juniper Junos, which allows a local attacker to exploit this vulnerability to elevate privileges...

Juniper Junos Denial of Service Vulnerability (CNVD-2015-00385)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A denial-of-service vulnerability exists in Juniper Junos, which can be exploited by attackers to cause affected devices to crash and deny service to legitimate users...

Juniper Junos JPPP Daemon Remote Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A vulnerability in the Juniper Networks JUNOS PPP backend program when using PPP authentication specially crafted for PAP authentication requests allows an attacker to exploit the...

Default Password (abc123) for 'admin' Account

The account 'admin' on the remote host has the default password 'abc123'. An attacker can leverage this issue to gain full access to the affected system. Note that Junos Space is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin";...