Juniper Junos IS-IS hello DoS (PSN-2012-07-647)

According to its self-reported version number, the rpd daemon on remote Junos router may crash when processing malformed IS-IS hello messages. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59991; scriptversion"1.8"; scriptcvsdate"Date: 2018/08/08 12:52:14";...

Juniper Junos PIM DoS (PSN-2012-07-648)

According to its self-reported version number, the remote router has a denial of service vulnerability. Sending a specially crafted broadcast storm of corrupt packets to the data multicast distribution tree port of a Junos router can cause the rpd daemon to hang. Only routers with PIM enabled in ...

Juniper Junos J-Web XSS (PSN-2012-07-649)

According to its self-reported version number, the remote Junos device has a cross-site scripting vulnerability in the J-Web component. Unspecified input to index.php can result in cross-site scripting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59993;...

Juniper Junos UDP/IP DoS (PSN-2012-07-652)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. The flowd process may crash when reassembling UDP/IP fragments. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59996; scriptversion"1.8"; scriptcvsdate"Date:...

Juniper Junos host-inbound-traffic Implicit Allow (PSN-2012-07-653)

According to its self-reported version number, the remote Junos device allows inbound SSH traffic even when 'host-inbound-traffic' is not explicitly configured to allow it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59997; scriptversion"1.9"; scriptcvsdate"Date:...

Juniper Junos lo0 Firewall Bypass (PSN-2012-07-651)

According to its self-reported version number, the remote Junos router has a firewall bypass vulnerability. This issue is present when log or syslog actions are used along with discard within a firewall filter term deployed on the lo0 loopback interface. When the receive rate is very high, some...

Juniper Junos OpenSSL ASN.1 Memory Corruption (PSN-2012-07-645)

According to its self-reported version number, the remote Junos router is using an outdated version of OpenSSL. Parsing malformed ASN.1 encoded data can result in memory corruption. This vulnerability can be triggered by attempting to parse untrusted data e.g., an X.509 certificate. C Tenable...

Juniper Junos Key Generation Weakness (PSN-2012-04-549)

According to its self-reported version and model number, the remote Junos device generates weak cryptographic keys for SSL and SSH. Due to a lack of entropy in the initial certificate creation, duplicate keys may be created on multiple devices. An attacker with knowledge of these keys would allow...

Juniper Junos J-Web CPU Utilization DoS (PSN-2012-04-547)

According to its self-reported version number, the J-Web component of the remote Junos system has a denial of service vulnerability. A high rate of inbound HTTP connections over an extended period can result in high CPU utilization, even after the connections are terminated. A remote,...

Juniper Junos MPLS DoS (PSN-2012-04-546)

According to its self-reported version number, the version of Junos running on the remote host has a denial of service vulnerability. When MPLS is enabled, receiving a high rate of Pseudo Wire l2vpn or l2circuit control words from an adjacent node can cause the routing engine RE to become...

Juniper Junos SRX Series for the Data Center Memory Corruption (PSN-2012-04-548)

According to its self-reported version and model number, the version of Junos running on the remote host has a memory corruption vulnerability. When an IPv6 flow session is freed on the Central Point CP, CP session statistics are updated. In some situations this update results in memory corruptio...

Juniper Junos SSH TACACS+ Incorrect Permissions (PSN-2012-04-545)

According to its self-reported version number, the version of Junos running on the remote host may grant permissions incorrectly when SSH sessions are authenticated remotely using TACACS+ for authentication and authorization. Fetched authorizations are stored in a file whose name is based on...

Juniper Junos MGD-CLI Arbitrary Command Execution (PSN-2011-11-418)

According to its self-reported version number, the version of Junos running on the remote device has a command execution vulnerability. A flaw in the logical model governing inter-process communications between the management daemon MGD and the command-line interpreter CLI could result in arbitra...

Juniper Junos BGP UPDATE Malformed ATTR_SET Attribute Remote DoS (PSN-2012-01-472)

According to its self-reported version number, the version of Junos running on the remote device has a denial of service vulnerability. Processing a BGP UPDATE containing a corrupted ATTRSET attribute can result in an rpd crash. This issue only affects routers configured for BGP running Junos 10....

Juniper Junos J-Web Component Unspecified CSRF (PSN-2012-01-474)

According to its self-reported version number, the J-Web component of the remote Juniper device has a cross-site request forgery vulnerability. A remote attacker could exploit this by tricking a user into making a maliciously crafted request, resulting in a compromise of the device. C Tenable...

Juniper Junos BGP Multiple Remote DoS (PSN-2012-01-475)

According to its self-reported version number, the version of Junos running on the remote host has multiple denial of service vulnerabilities. Either of the following issues could result in an rpd crash : - Receipt of a malformed non-transitive BGP PATH attribute - An established session...

Juniper Junos J-Web Administrator Logs XSS (PSN-2011-10-392)

According to its self-reported version number, the J-Web component of the remote Juniper device has a persistent cross-site scripting vulnerability. During the authentication process, user controlled input is added to the administrator logs. When an administrator reviews the logs, that user...

Juniper Junos Next-Gen MVPN Senario Malformed Message Handling Remote DoS (PSN-2011-10-391)

According to its self-reported version number, the remote Juniper router has a denial of service vulnerability. In a Next Generation MVPN scenario, a kernel memory buffer could get corrupted when the router receives a bootstrap or auto-RP message larger than 204 bytes, causing the kernel to crash...

Juniper Junos MPC Malformed Route Prefix Remote DoS (PSN-2011-08-327)

According to its self-reported version number, the remote Juniper router has a denial of service vulnerability. Receiving specific route prefix install/delete actions e.g., a BGP routing update can cause the router to crash. This issue only affects MX Series routers with port concetrators based o...

Junos Version Detection

The remote host is running Junos, an operating system for Juniper devices. It is possible to read the Junos version number by logging into the device via SSH, using SNMP, or viewing the web interface. TRUSTED...