PT-2010-3875 · Juniper Networks · Juniper Networks Ive

Publicado 2010-06-15 · Atualizado 2018-10-10 · CVE-2010-2289

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks IVE versions 6.5R1 (Build 14599) through 6.5R2 (Build 14951)

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter. This can be exploited by including a malicious URL in the Location parameter.

Recommendations For Juniper Networks IVE versions 6.5R1 (Build 14599) through 6.5R2 (Build 14951), consider restricting access to the homepage.cgi until a patch is available. Avoid using the Location parameter in the affected URL until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2289

Produtos afetados

Juniper Networks Ive

Referências · 10

• 🔥 http://osvdb.org/65289 · Exploit
• 🔥 http://procheckup.com/vulnerability_manager/vulnerabilities/pr09-17 · Exploit
• http://vupen.com/english/advisories/2010/1420 · Aviso do Fabricante
• http://securityfocus.com/archive/1/511775/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2289 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59284 · Nota
• http://juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2010-05-751&viewMode=view · Nota
• http://securityfocus.com/bid/40729 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2289 · Nota
• http://secunia.com/advisories/40117 · Aviso do Fabricante