Vulnerabilities > CVE-2014-0618 - Unspecified vulnerability in Juniper products

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
juniper
nessus
NVD
Published: 2014-01-11
Updated: 2024-11-21

Summary

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.

Vulnerable Configurations

Part Description Count
OS
Juniper
5
Hardware
Juniper
12

Nessus

NASL familyJunos Local Security Checks
NASL idJUNIPER_JSA10611.NASL
descriptionAccording to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability in the flow daemon (flowd) when handling certain valid HTTP protocol messages. A remote attacker can exploit this to crash the device. Note that this issue only affects devices configured as a Unified Access Control (UAC) enforcer in a UAC network with Captive Portal authentication enabled.
last seen2019-10-28
modified2014-01-16
plugin id72000
published2014-01-16
reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/72000
titleJuniper Junos SRX Series flowd Remote DoS (JSA10611)

References