PT-2004-1587 · Juniper Networks · Junos

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-0467

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Juniper JUNOS versions 5.x through 7.x

Description The issue allows remote attackers to cause a denial of service, resulting in routing being disabled. This occurs when a large number of MPLS packets are sent, which are not properly filtered or verified before being processed by the Routing Engine. As a result, the speed at which other packets are processed is reduced.

Recommendations For Juniper JUNOS versions 5.x through 7.x, consider implementing packet filtering to restrict the influx of MPLS packets and prevent them from being sent to the Routing Engine without proper verification.

Fix

Related Identifiers

CVE-2004-0467

Affected Products

Junos

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0467 · Security Note
• http://redhat.com/support/errata/RHSA-2005-081.html · Vendor Advisory
• http://securityfocus.com/bid/12379 · Patch
• http://niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en · Vendor Advisory
• http://kb.cert.org/vuls/id/409555 · Patch
• http://kb.cert.org/vuls/id/JSHA-68ZJCQ · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19094 · Note
• http://securitytracker.com/id?1013039 · Note
• http://secunia.com/advisories/14049 · Note