PT-2009-5779 · Juniper Networks · Junos

Publicado 2009-09-30 · Atualizado 2009-10-05 · CVE-2009-3486

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Juniper JUNOS version 8.5R1.14

Description The issue affects the J-Web interface, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters in different programs, including the host parameter to the pinghost or traceroute program, the probe-limit parameter to the configuration program, and several other parameters in actions related to firewall filters, COS physical interfaces, SNMP, users, and local certificates. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Juniper JUNOS version 8.5R1.14, consider disabling access to the J-Web interface until a fix is available. Restrict the use of the diagnose program and its reachable components, such as the pinghost and traceroute programs. Avoid using the vulnerable parameters, including host, probe-limit, wizard-ids, pager-new-identifier, cos-physical-interface-name, wizard-args, username, fullname, certname, and certbody, in their respective actions. Apply configuration changes to limit the risk of exploitation, such as restricting access to the configuration program and its related actions.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-3486

Produtos afetados

Junos

Referências · 7

• 🔥 https://exploit-db.com/exploits/33259 · Exploit
• 🔥 http://securityfocus.com/bid/36537 · Exploit
• 🔥 http://procheckup.com/vulnerability_manager/vulnerabilities/pr09-09 · Exploit
• 🔥 https://exploit-db.com/exploits/33258 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3486 · Nota de Segurança
• http://secunia.com/advisories/36829 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2784 · Aviso do Fabricante