CVE-2014-6383

CVE-2014-6383 concerns Juniper Networks Junos OS where the stateless firewall on Trio-based PFE modules did not properly match ports, enabling a remote attacker to bypass firewall rules. Affected versions include Junos 13.3R3, 14.1R1, and 14.1R2. The underlying cause is faulty port matching in th...

CVE-2014-6383: Undefined Security Weakness

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule...

PT-2015-3852

Name of the Vulnerable Software and Affected Versions Junos versions 13.3R3, 14.1R1, and 14.1R2 Description The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules...

CVE-2011-1652

The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement RA, and does not provide an option to ignore an unexpected RA, which allows remote attackers to conduct...

PT-2011-3114

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.3 Apple TV versions prior to 4.2 Description The issue concerns the stateless address autoconfiguration functionality in the IPv6 networking implementation. It allows remote IPv6 servers to track users by logging...

HTTP Server Cookies Set

HTTP cookies are pieces of information that are presented by web servers and are sent back by the browser. As HTTP is a stateless protocol, cookies are a possible mechanism to keep track of sessions. This plugin displays the list of the HTTP cookies that were set by the web server when it was...

Debian DSA-1603-1 : bind9 - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's BIND 9 packages to implement the recommended...