Multiple vulnerabilities in Juniper Junos

Description

Multiple serious vulnerabilities have been found in Juniper Junos. Malicious users can exploit these vulnerabilities to gainprivileges, execute arbitrary code orspoof user interface.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via unspecified vectors;
2. Unknown vulnerability can be exploited remotely via a specially designed header or CLI commands;
3. Lack of log-out-on-disconnect enforcement can be exploited remotely via devica access manipulations.

Original advisories

• Juniper advisory

• Juniper advisory
• Juniper advisory
• Juniper advisory

Related products

• Juniper-Junos-OS

CVE list

• CVE-2015-3005
  warning
• CVE-2015-3004
  warning
• CVE-2015-3002
  high
• CVE-2015-3003
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com