PT-2006-3066 · Juniper Networks · Juniper Netscreen Ive+1

Yuji Ukai · Published 2006-04-29 · Updated 2018-10-18 · CVE-2006-2086

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Juniper NetScreen IVE device versions prior to 4.2r8.1 Juniper NetScreen IVE device versions 5.0 prior to 5.0r6.1 Juniper NetScreen IVE device versions 5.1 prior to 5.1r8 Juniper NetScreen IVE device versions 5.2 prior to 5.2r4.1 Juniper NetScreen IVE device versions 5.3 prior to 5.3r2.1

Description A buffer overflow issue exists in the JuniperSetupDLL.dll, which is loaded by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device. This issue allows remote attackers to execute arbitrary code via a long argument in the ProductName parameter.

Recommendations For versions prior to 4.2r8.1, update to version 4.2r8.1 or later. For versions 5.0 prior to 5.0r6.1, update to version 5.0r6.1 or later. For versions 5.1 prior to 5.1r8, update to version 5.1r8 or later. For versions 5.2 prior to 5.2r4.1, update to version 5.2r4.1 or later. For versions 5.3 prior to 5.3r2.1, update to version 5.3r2.1 or later.

Exploit

Fix

Related Identifiers

CVE-2006-2086

Affected Products

Juniper Netscreen Ive

Juniper Ssl-Vpn Client

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/juniper_sslvpn_ive_setupdll.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16568 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2086 · Security Note
• http://juniper.net/support/security/alerts/PSN-2006-03-013.txt · Note
• http://kb.cert.org/vuls/id/477604 · Note
• http://securityfocus.com/bid/17712 · Note
• http://vupen.com/english/advisories/2006/1543 · Note
• http://secunia.com/advisories/19842 · Note
• http://securityfocus.com/archive/1/432155/100/0/threaded · Note
• http://osvdb.org/25001 · Note
• http://eeye.com/html/research/advisories/AD20060424.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26077 · Note
• http://securityreason.com/securityalert/819 · Note
• http://securitytracker.com/id?1016000 · Note