Juniper Junos IPv6 Egress Filter DoS (PSN-2013-04-915)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted IPv6 packets that match IPv6 egress filters with a discard or reject action on the lo0 interface can result in a memory leak. This can lead to MBUF exhaustion, resulting...

Juniper Junos Firewall Bypass DoS (PSN-2013-04-912)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. It is possible to bypass the firewall to create sessions for connections that should not be allowed by policy. A remote, untrusted attacker could exploit this to exhaust session resources...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Design/Logic Flaw

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

CVE-2013-3497 affects Juniper Junos Space prior to 12.3P2.8 (JA1500 and related deployments). The vulnerability exposes cleartext passwords in a configuration tab, enabling reading by physically proximate attackers who view the workstation screen. Exploitation details are not provided in the docu...

Juniper Junos Unspecified DoS (PSN-2013-01-818)

According to its self-reported version number, the remote Junos device has an unspecified denial of service vulnerability. A remote, unauthenticated attacker could exploit this by sending a specially crafted TCP packet, causing the host to crash. C Tenable Network Security, Inc...

Juniper Junos IPv6报文处理MBUF耗竭拒绝服务漏洞

Juniper Networks JUNOS是一款Juniper网络公司的系列边界路由器等所运行的操作系统 Juniper Junos存在一个缺陷可导致拒绝服务攻击，在处理某些IPv6报文过程中，检查与应用于lo0接口上IPv6 egress过滤器丢弃或者拒绝术语是否匹配时可触发此漏洞，允许远程攻击者利用漏洞耗竭MBUF，造成内核崩溃 0 Juniper JUNOS 10.4R11 Juniper JUNOS 11.4R5 Juniper JUNOS 12.1R4 Juniper JUNOS 12.2R1 厂商解决方案 Juniper JUNOS 10.4R12, 11.4R5-S3,...

Juniper's Junos Could Open Routers to TCP Attacks

UPDATE Some systems running older versions of Juniper Networks’ Junos OS software could be vulnerable to a transmission control protocol TCP flaw that can enable a hacker to crash and reboot certain routers. According to Australia’s IT News, an attacker could send a specially crafted TCP packet t...

Juniper Junos PIM Join Flood DoS (PSN-2013-01-808)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving a large number of specially crafted IPv4 or IPv6 PIM join messages in a Next-Generation Multicast VPN NGEN MVPN environment can cause the routing daemon to crash. C Tenable...

Juniper Junos J-Web URL Encoding Heap-Based Buffer Overflow (PSN-2013-01-807)

According to its self-reported version number, the remote Junos device has a heap-based buffer overflow in the J-Web component. Sending an unspecified request related to URL encoding can corrupt heap memory. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenabl...

Juniper Junos Compliance Checks

Binary data junipercompliancecheck.nbin...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Juniper Junos ttymodem() DoS (PSN-2012-08-699)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A timing issue in ttymodem can cause the Junos kernel to crash whenever the device is accessed remotely e.g., telnet, SSH. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos web-authentication Policy Not Enforced (PSN-2012-10-735)

According to its self-reported version number, the remote Junos device stops enforcing a web-authentication policy if its client-match statement is removed. This would allow unauthenticated access to resources that are assumed to be protected by web-authentication. C Tenable Network Security, Inc...

Juniper Junos PIM Hello DoS (PSN-2012-10-732)

According to its self-reported version number, the remote Junos device could crash when processing a malformed PIM message. A remote, unauthenticated attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62712;...

Juniper Junos SYN Cookie Protection DoS (PSN-2012-07-643)

According to its self-reported version number, the SYN cookie protection implementation of the remote Junos system has a denial of service vulnerability. If SYN flood protection is enabled and the SYN cookie protection threshold is exceeded, the server responds to connections with an RST, causing...

Juniper Junos IS-IS hello DoS (PSN-2012-07-647)

According to its self-reported version number, the rpd daemon on remote Junos router may crash when processing malformed IS-IS hello messages. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59991; scriptversion"1.8"; scriptcvsdate"Date: 2018/08/08 12:52:14";...

Juniper Junos J-Web Hash Collision DoS (PSN-2012-07-650)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability in the J-Web component. It is possible to send requests to the web server that result in hash collisions, resulting in CPU consumption. C Tenable Network Security, Inc. include"compat.inc"...

Juniper Junos ICMPv6 DoS (PSN-2012-07-644)

According to its self-reported version number, the remote Junos router has a denial of service vulnerability. Receiving an ICMPv6 packet with a corrupted payload within an IPv6 L3VPN can result in a kernel panic. Only VPNv6 configurations without the 'vrf-table-label' statement in the routing...