Lucene search

[email protected]CVE-2013-6013

HistoryOct 17, 2013 - 11:55 p.m.

CVE-2013-6013

2013-10-1723:55:04

CWE-119

[email protected]

web.nvd.nist.gov

buffer overflow

juniper junos

flow daemon

flowd

remote code execution

telnet

nvd

cve-2013-6013

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.11 Low

EPSS

Percentile

95.1%

JSON

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.

Affected configurations

NVD

Node

juniperjunosRange≤10.4

juniperjunosMatch4.0

juniperjunosMatch4.1

juniperjunosMatch4.2

juniperjunosMatch4.3

juniperjunosMatch4.4

juniperjunosMatch5.0

juniperjunosMatch5.1

juniperjunosMatch5.2

juniperjunosMatch5.3

juniperjunosMatch5.4

juniperjunosMatch5.5

juniperjunosMatch5.6

juniperjunosMatch5.7

juniperjunosMatch6.0

juniperjunosMatch6.1

juniperjunosMatch6.2

juniperjunosMatch6.3

juniperjunosMatch6.4

juniperjunosMatch7.0

juniperjunosMatch7.1

juniperjunosMatch7.2

juniperjunosMatch7.3

juniperjunosMatch7.4

juniperjunosMatch7.5

juniperjunosMatch7.6

juniperjunosMatch8.0

juniperjunosMatch8.1

juniperjunosMatch8.2

juniperjunosMatch8.3

juniperjunosMatch8.4

juniperjunosMatch9.0

juniperjunosMatch9.1

juniperjunosMatch9.2

juniperjunosMatch9.4

juniperjunosMatch9.5

juniperjunosMatch9.6

juniperjunosMatch11.4

juniperjunosMatch12.1x44

juniperjunosMatch12.1x45

AND

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx210Match-

junipersrx220Match-

junipersrx240Match-

junipersrx3400Match-

junipersrx3600Match-

junipersrx550Match-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

CPENameOperatorVersion
juniper:junosjuniper junosle10.4
juniper:junosjuniper junoseq4.0
juniper:junosjuniper junoseq4.1
juniper:junosjuniper junoseq4.2
juniper:junosjuniper junoseq4.3
juniper:junosjuniper junoseq4.4
juniper:junosjuniper junoseq5.0
juniper:junosjuniper junoseq5.1
juniper:junosjuniper junoseq5.2
juniper:junosjuniper junoseq5.3

CPE	Name	Operator	Version
juniper:junos	juniper junos	le	10.4
juniper:junos	juniper junos	eq	4.0
juniper:junos	juniper junos	eq	4.1
juniper:junos	juniper junos	eq	4.2
juniper:junos	juniper junos	eq	4.3
juniper:junos	juniper junos	eq	4.4
juniper:junos	juniper junos	eq	5.0
juniper:junos	juniper junos	eq	5.1
juniper:junos	juniper junos	eq	5.2
juniper:junos	juniper junos	eq	5.3

Rows per page:

1-10 of 401

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10594

osvdb.org/98369

secunia.com/advisories/55109

www.securityfocus.com/bid/62962

www.securitytracker.com/id/1029175

exchange.xforce.ibmcloud.com/vulnerabilities/87847

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.11 Low

EPSS

Percentile

95.1%

JSON

Related for CVE-2013-6013

cvelist1 nessus1 openvas1 prion1 nvd1