Details of VAR-201307-0475

ID

VAR-201307-0475

CVE

CVE-2013-4685

TITLE

Juniper Networks SRX Runs on the device Junos of flowd Vulnerable to buffer overflow

Trust: 0.8

sources: JVNDB: JVNDB-2013-003332

DESCRIPTION

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100. Vendors have confirmed this vulnerability PR 849100 It is released as.Skillfully crafted by a third party HTTP Arbitrary code may be executed via a request. Juniper Networks Junos is prone to a remote buffer-overflow vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the affected device. Failed exploit attempts may result in a denial-of-service condition. The operating system provides a secure programming interface and Junos SDK. Buffering exists in flowd (Flow Daemon) in Juniper Junos 10.4 releases prior to 10.4S14, 11.4 releases prior to 11.4R7, 12.1 releases prior to 12.1R6, and 12.1X44 releases prior to 12.1X44-D15 on SRX Series Server Gateway devices area overflow vulnerability

Trust: 1.98

sources: NVD: CVE-2013-4685 // JVNDB: JVNDB-2013-003332 // BID: 61125 // VULHUB: VHN-64687

AFFECTED PRODUCTS

vendor:	juniper	model:	junos	scope:	eq	version:	12.1x44	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	12.1	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	11.4	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	10.4	Trust: 1.9
vendor:	juniper	model:	srx3600	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx100	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx240	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx550	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx210	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx110	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx1400	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx3400	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx650	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx220	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx5800	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx5600	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1x44	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	10.4	Trust: 0.8
vendor:	juniper	model:	srx3400	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	11.4	Trust: 0.8
vendor:	juniper	model:	srx210	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx650	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	11.4r7	Trust: 0.8
vendor:	juniper	model:	srx550	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx5800	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx100	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1r6	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1x44-d15	Trust: 0.8
vendor:	juniper	model:	srx220	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	10.4s14	Trust: 0.8
vendor:	juniper	model:	srx5600	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx110	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx240	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx1400	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1	Trust: 0.8
vendor:	juniper	model:	srx3600	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx650	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx5800	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx5600	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx550	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx3600	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx3400	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx240	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx220	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx210	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx1400	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx110	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx100	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	junos 12.1x44-d15	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 12.1r6	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r7	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4s14	scope:	ne	version:	-	Trust: 0.3

sources: BID: 61125 // JVNDB: JVNDB-2013-003332 // CNNVD: CNNVD-201307-229 // NVD: CVE-2013-4685

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-4685
value:	HIGH
Trust: 1.0
NVD:	CVE-2013-4685
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201307-229
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-64687
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2013-4685
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-64687
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-64687 // JVNDB: JVNDB-2013-003332 // CNNVD: CNNVD-201307-229 // NVD: CVE-2013-4685

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-64687 // JVNDB: JVNDB-2013-003332 // NVD: CVE-2013-4685

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201307-229

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201307-229

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-003332

PATCH

title:

JSA10574

url:

http://kb.juniper.net/JSA10574

Trust: 0.8

sources: JVNDB: JVNDB-2013-003332

EXTERNAL IDS

db:	NVD	id:	CVE-2013-4685	Trust: 2.8
db:	JUNIPER	id:	JSA10574	Trust: 2.0
db:	BID	id:	61125	Trust: 1.4
db:	OSVDB	id:	95108	Trust: 1.1
db:	JVNDB	id:	JVNDB-2013-003332	Trust: 0.8
db:	CNNVD	id:	CNNVD-201307-229	Trust: 0.7
db:	VULHUB	id:	VHN-64687	Trust: 0.1

sources: VULHUB: VHN-64687 // BID: 61125 // JVNDB: JVNDB-2013-003332 // CNNVD: CNNVD-201307-229 // NVD: CVE-2013-4685

REFERENCES

url:	http://kb.juniper.net/jsa10574	Trust: 1.7
url:	http://www.securityfocus.com/bid/61125	Trust: 1.1
url:	http://osvdb.org/95108	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-4685	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-4685	Trust: 0.8
url:	http://kb.juniper.net/infocenter/index?page=content&id=jsa10574	Trust: 0.3
url:	http://www.juniper.net/	Trust: 0.3

sources: VULHUB: VHN-64687 // BID: 61125 // JVNDB: JVNDB-2013-003332 // CNNVD: CNNVD-201307-229 // NVD: CVE-2013-4685

CREDITS

The vendor reported this issue

Trust: 0.3

sources: BID: 61125

SOURCES

db:	VULHUB	id:	VHN-64687
db:	BID	id:	61125
db:	JVNDB	id:	JVNDB-2013-003332
db:	CNNVD	id:	CNNVD-201307-229
db:	NVD	id:	CVE-2013-4685

LAST UPDATE DATE

2024-11-23T22:59:47.095000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-64687	date:	2013-08-22T00:00:00
db:	BID	id:	61125	date:	2013-07-11T00:00:00
db:	JVNDB	id:	JVNDB-2013-003332	date:	2013-07-16T00:00:00
db:	CNNVD	id:	CNNVD-201307-229	date:	2013-07-19T00:00:00
db:	NVD	id:	CVE-2013-4685	date:	2024-11-21T01:56:03.703

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-64687	date:	2013-07-11T00:00:00
db:	BID	id:	61125	date:	2013-07-11T00:00:00
db:	JVNDB	id:	JVNDB-2013-003332	date:	2013-07-16T00:00:00
db:	CNNVD	id:	CNNVD-201307-229	date:	2013-07-12T00:00:00
db:	NVD	id:	CVE-2013-4685	date:	2013-07-11T14:55:01.350