7998 matches found
Juniper Junos Unsupported Version Detection
According to its self-reported version number, the installation of the Juniper Junos operating system running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain securi...
Juniper Junos Multiple sfid Daemon Malformed Packet Remote DoS (PSN-2011-04-241)
The remote device is a Juniper EX Series switch running Junos 11.1R1. The sfid daemon on the line card may crash repeatedly due to improper parsing of NetBIOS packets. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if...
Junos Version Detection
The remote host is running Junos, an operating system for Juniper devices. It is possible to read the Junos version number by logging into the device via SSH, using SNMP, or viewing the web interface. TRUSTED...
Juniper Junos Fragmented ICMP Packet Handling Remote DoS (PSN-2011-07-298)
According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Receiving a burst of fragmented ICMP packets can cause the router to become unresponsive until it is rebooted. A remote, unauthenticated attacker could...
Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)
According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...
Juniper Junos PIM rpd Crafted Boot Message Remote DoS (PSN-2011-07-296)
According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability. Sending a specially crafted bootstrap message to the PIM router can cause the rpd routing daemon to crash. A remote, unauthenticated attacker could exploi...
Juniper Junos IPv6 over IPv4 Security Policy Bypass (PSN-2011-07-299)
According to its self-reported version number, the remote Juniper device is running a version of Junos with a security bypass vulnerability. When the device is configured to perform IPv6 in IPv4 tunneling, policies that apply to the encapsulated datagram are not enforced. A remote, unauthenticate...
Juniper Networks Junos OS DoS Vulnerability (CVE-2004-0468)
Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service DoS via certain IPv6 packets. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Juniper Networks Junos OS Detection (SSH Login)
SSH login-based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Juniper Networks Junos OS CVE-2009-3485
Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a...
JBoss Enterprise Application Platform Multiple Vulnerabilities
Description JBoss Enterprise Application Platform is prone to multiple vulnerabilities, including an information-disclosure issue and multiple authentication-bypass issues. An attacker can exploit these issues to bypass certain security restrictions to obtain sensitive information or gain...
Juniper JunOS Malformed TCP Option
This module exploits a denial of service vulnerability in Juniper Network's JunOS router operating system. By sending a TCP packet with TCP option 101 set, an attacker can cause an affected router to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...
2^6 TCP Control Bit - Fuzzer (No ECN or CWR)
2^6 TCP Control Bit - Fuzzer No ECN or CWR !/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing...
JunOS Malformed TCP Options Denial Of Service
!/usr/bin/perl my $host = shift; my $port = shift; use Net::Packet qw$Env; use Net::Packet::IPv4; my $ip = Net::Packet::IPv4-newdst = $host; use Net::Packet::TCP; my $tcp = Net::Packet::TCP-new dst = $port, options = "\x65\x02\x01\x01", ; use Net::Packet::Frame; my $frame = Net::Packet::Frame-new...
Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service Multiple Vulnerabilities
Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service Multiple Vulnerabilities source: https://www.securityfocus.com/bid/37670/info JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets. JUNOS is also pron...
CVE-2009-3487
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...
CVE-2009-3486
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
Cross site scripting
Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...