PT-2013-5138 · Juniper Networks · Junos

Publicado 2013-07-11 · Atualizado 2013-08-22 · CVE-2013-4688

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos version 10.4 before 10.4R11 on SRX devices

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted MSRPC requests when the MSRPC Application Layer Gateway (ALG) is enabled.

Recommendations For Junos version 10.4 before 10.4R11 on SRX devices, update to version 10.4R11 or later to resolve the issue. As a temporary workaround, consider disabling the MSRPC Application Layer Gateway (ALG) to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2013-4688

Produtos afetados

Junos

Referências · 3

• http://kb.juniper.net/JSA10578 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4688 · Nota de Segurança
• http://securityfocus.com/bid/61124 · Nota