PT-2004-1587 · Juniper Networks · Junos

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-0467

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Juniper JUNOS versions 5.x through 7.x

Description The issue allows remote attackers to cause a denial of service, resulting in routing being disabled. This occurs when a large number of MPLS packets are sent, which are not properly filtered or verified before being processed by the Routing Engine. As a result, the speed at which other packets are processed is reduced.

Recommendations For Juniper JUNOS versions 5.x through 7.x, consider implementing packet filtering to restrict the influx of MPLS packets and prevent them from being sent to the Routing Engine without proper verification.

Correção

Identificadores relacionados

CVE-2004-0467

Produtos afetados

Junos

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0467 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2005-081.html · Aviso do Fabricante
• http://securityfocus.com/bid/12379 · Correção
• http://niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19094 · Nota
• http://kb.cert.org/vuls/id/409555 · Correção
• http://kb.cert.org/vuls/id/JSHA-68ZJCQ · Correção
• http://securitytracker.com/id?1013039 · Nota
• http://secunia.com/advisories/14049 · Nota