PT-2010-3875 · Juniper Networks · Juniper Networks Ive

Published 2010-06-15 · Updated 2018-10-10 · CVE-2010-2289

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks IVE versions 6.5R1 (Build 14599) through 6.5R2 (Build 14951)

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter. This can be exploited by including a malicious URL in the Location parameter.

Recommendations For Juniper Networks IVE versions 6.5R1 (Build 14599) through 6.5R2 (Build 14951), consider restricting access to the homepage.cgi until a patch is available. Avoid using the Location parameter in the affected URL until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2289

Affected Products

Juniper Networks Ive

References · 10

• 🔥 http://osvdb.org/65289 · Exploit
• 🔥 http://procheckup.com/vulnerability_manager/vulnerabilities/pr09-17 · Exploit
• http://vupen.com/english/advisories/2010/1420 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2289 · Security Note
• http://secunia.com/advisories/40117 · Vendor Advisory
• http://securityfocus.com/archive/1/511775/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59284 · Note
• http://juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2010-05-751&viewMode=view · Note
• http://securityfocus.com/bid/40729 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2289 · Note