PT-2013-5135 · Juniper Networks · Junos

Publicado 2013-07-11 · Atualizado 2013-08-22 · CVE-2013-4685

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Junos versions 10.4 before 10.4S14 Junos versions 11.4 before 11.4R7 Junos versions 12.1 before 12.1R6 Junos versions 12.1X44 before 12.1X44-D15

Description A buffer overflow issue in flowd in Junos, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests.

Recommendations For Junos versions 10.4 before 10.4S14, update to 10.4S14 or later. For Junos versions 11.4 before 11.4R7, update to 11.4R7 or later. For Junos versions 12.1 before 12.1R6, update to 12.1R6 or later. For Junos versions 12.1X44 before 12.1X44-D15, update to 12.1X44-D15 or later.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4685

Produtos afetados

Junos

Referências · 4

• http://kb.juniper.net/JSA10574 · Aviso do Fabricante
• http://osvdb.org/95108 · Nota
• http://securityfocus.com/bid/61125 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4685 · Nota de Segurança