PT-2013-5922 · Juniper Networks · Junos

Publicado

2013-10-28

·

Atualizado

2019-09-27

·

CVE-2013-6014

CVSS v2.0

6.1

Média

VetorAV:A/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Juniper Junos versions 10.4 before 10.4S15 Juniper Junos versions 11.4 before 11.4R9 Juniper Junos versions 11.4X27 before 11.4X27.44 Juniper Junos versions 12.1 before 12.1R7 Juniper Junos versions 12.1X44 before 12.1X44-D20 Juniper Junos versions 12.1X45 before 12.1X45-D15 Juniper Junos versions 12.2 before 12.2R6 Juniper Junos versions 12.3 before 12.3R3 Juniper Junos versions 13.1 before 13.1R3 Juniper Junos versions 13.2 before 13.2R1
Description The issue allows remote attackers to perform ARP poisoning attacks and possibly obtain sensitive information via a crafted ARP message when Proxy ARP is enabled on an unnumbered interface.
Recommendations For Juniper Junos versions 10.4 before 10.4S15, update to version 10.4S15 or later. For Juniper Junos versions 11.4 before 11.4R9, update to version 11.4R9 or later. For Juniper Junos versions 11.4X27 before 11.4X27.44, update to version 11.4X27.44 or later. For Juniper Junos versions 12.1 before 12.1R7, update to version 12.1R7 or later. For Juniper Junos versions 12.1X44 before 12.1X44-D20, update to version 12.1X44-D20 or later. For Juniper Junos versions 12.1X45 before 12.1X45-D15, update to version 12.1X45-D15 or later. For Juniper Junos versions 12.2 before 12.2R6, update to version 12.2R6 or later. For Juniper Junos versions 12.3 before 12.3R3, update to version 12.3R3 or later. For Juniper Junos versions 13.1 before 13.1R3, update to version 13.1R3 or later. For Juniper Junos versions 13.2 before 13.2R1, update to version 13.2R1 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-6014

Produtos afetados

Junos