Juniper Junos DNSSEC Validation DoS (PSN-2013-04-918)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When DNSSEC is enabled and validation is active, a high query load can cause the host to crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network...

Juniper Junos SIP DoS (PSN-2013-04-911)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When the SIP ALG feature is enabled, a specially crafted SIP packet can cause the flowd process to crash. A remote, unauthenticated attacker could exploit this to drop all existing networ...

Juniper Junos Proxy ARP DoS (PSN-2013-04-913)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When Proxy ARP is enabled, specially crafted ARP packets can trigger a kernel crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network Security,...

Juniper Junos Invalid Ether-type DoS (PSN-2013-04-916)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving Ethernet packets with an invalid Ether-type can cause congestion on routers with line cards installed using Ichip-based FPCs and DPCs. An unauthenticated attacker on the same...

Juniper Junos J-Web Remote Code Execution (PSN-2013-04-914)

According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. When J-Web is enabled, authenticated users can execute arbitrary commands. This could allow an unprivileged user e.g., read only access to get complete administrative access. A remote...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Design/Logic Flaw

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2013-3497

CVE-2013-3497 affects Juniper Junos Space prior to 12.3P2.8 (JA1500 and related deployments). The vulnerability exposes cleartext passwords in a configuration tab, enabling reading by physically proximate attackers who view the workstation screen. Exploitation details are not provided in the docu...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

Juniper Junos Unspecified DoS (PSN-2013-01-818)

According to its self-reported version number, the remote Junos device has an unspecified denial of service vulnerability. A remote, unauthenticated attacker could exploit this by sending a specially crafted TCP packet, causing the host to crash. C Tenable Network Security, Inc...

Juniper Junos IPv6报文处理MBUF耗竭拒绝服务漏洞

Juniper Networks JUNOS是一款Juniper网络公司的系列边界路由器等所运行的操作系统 Juniper Junos存在一个缺陷可导致拒绝服务攻击，在处理某些IPv6报文过程中，检查与应用于lo0接口上IPv6 egress过滤器丢弃或者拒绝术语是否匹配时可触发此漏洞，允许远程攻击者利用漏洞耗竭MBUF，造成内核崩溃 0 Juniper JUNOS 10.4R11 Juniper JUNOS 11.4R5 Juniper JUNOS 12.1R4 Juniper JUNOS 12.2R1 厂商解决方案 Juniper JUNOS 10.4R12, 11.4R5-S3,...

Juniper's Junos Could Open Routers to TCP Attacks

UPDATE Some systems running older versions of Juniper Networks’ Junos OS software could be vulnerable to a transmission control protocol TCP flaw that can enable a hacker to crash and reboot certain routers. According to Australia’s IT News, an attacker could send a specially crafted TCP packet t...

Juniper Junos J-Web URL Encoding Heap-Based Buffer Overflow (PSN-2013-01-807)

According to its self-reported version number, the remote Junos device has a heap-based buffer overflow in the J-Web component. Sending an unspecified request related to URL encoding can corrupt heap memory. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenabl...

Juniper Junos PIM Join Flood DoS (PSN-2013-01-808)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving a large number of specially crafted IPv4 or IPv6 PIM join messages in a Next-Generation Multicast VPN NGEN MVPN environment can cause the routing daemon to crash. C Tenable...

Juniper Junos Compliance Checks

Binary data junipercompliancecheck.nbin...

Juniper Junos ttymodem() DoS (PSN-2012-08-699)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A timing issue in ttymodem can cause the Junos kernel to crash whenever the device is accessed remotely e.g., telnet, SSH. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Juniper Junos web-authentication Policy Not Enforced (PSN-2012-10-735)

According to its self-reported version number, the remote Junos device stops enforcing a web-authentication policy if its client-match statement is removed. This would allow unauthenticated access to resources that are assumed to be protected by web-authentication. C Tenable Network Security, Inc...

Juniper Junos PIM Hello DoS (PSN-2012-10-732)

According to its self-reported version number, the remote Junos device could crash when processing a malformed PIM message. A remote, unauthenticated attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62712;...

Juniper Junos ICMPv6 DoS (PSN-2012-07-644)

According to its self-reported version number, the remote Junos router has a denial of service vulnerability. Receiving an ICMPv6 packet with a corrupted payload within an IPv6 L3VPN can result in a kernel panic. Only VPNv6 configurations without the 'vrf-table-label' statement in the routing...