CVE-2013-6013

EPSS 4%
Veröffentlicht 17.10.2013 23:55:04
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version <= 10.4

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 4.0

Juniper ≫ Junos Version 4.1

Juniper ≫ Junos Version 4.2

Juniper ≫ Junos Version 4.3

Juniper ≫ Junos Version 4.4

Juniper ≫ Junos Version 5.0

Juniper ≫ Junos Version 5.1

Juniper ≫ Junos Version 5.2

Juniper ≫ Junos Version 5.3

Juniper ≫ Junos Version 5.4

Juniper ≫ Junos Version 5.5

Juniper ≫ Junos Version 5.6

Juniper ≫ Junos Version 5.7

Juniper ≫ Junos Version 6.0

Juniper ≫ Junos Version 6.1

Juniper ≫ Junos Version 6.2

Juniper ≫ Junos Version 6.3

Juniper ≫ Junos Version 6.4

Juniper ≫ Junos Version 7.0

Juniper ≫ Junos Version 7.1

Juniper ≫ Junos Version 7.2

Juniper ≫ Junos Version 7.3

Juniper ≫ Junos Version 7.4

Juniper ≫ Junos Version 7.5

Juniper ≫ Junos Version 7.6

Juniper ≫ Junos Version 8.0

Juniper ≫ Junos Version 8.1

Juniper ≫ Junos Version 8.2

Juniper ≫ Junos Version 8.3

Juniper ≫ Junos Version 8.4

Juniper ≫ Junos Version 9.0

Juniper ≫ Junos Version 9.1

Juniper ≫ Junos Version 9.2

Juniper ≫ Junos Version 9.4

Juniper ≫ Junos Version 9.5

Juniper ≫ Junos Version 9.6

Juniper ≫ Junos Version 11.4

Juniper ≫ Junos Version 12.1x44

Juniper ≫ Junos Version 12.1x45

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4%	0.892

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10594

Vendor Advisory

http://osvdb.org/98369

http://secunia.com/advisories/55109

Vendor Advisory

http://www.securityfocus.com/bid/62962

http://www.securitytracker.com/id/1029175

https://exchange.xforce.ibmcloud.com/vulnerabilities/87847

https://nvd.nist.gov/vuln/detail/CVE-2013-6013

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6013

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6013

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-6013