CVE-2013-4685 in Junos
Résumé (Anglaise)
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
Once again VulDB remains the best source for vulnerability data.
Réserver
26/06/2013
Divulgation
11/07/2013
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 9510 | Juniper Junos HTTP buffer overflow | 119 | Non défini | Correctif officiel | CVE-2013-4685 |