CVE-2013-6013

EPSS 5.94%
Published 17.10.2013 23:55:04
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version <= 10.4

   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version4.0

Juniper ≫ Junos Version4.1

Juniper ≫ Junos Version4.2

Juniper ≫ Junos Version4.3

Juniper ≫ Junos Version4.4

Juniper ≫ Junos Version5.0

Juniper ≫ Junos Version5.1

Juniper ≫ Junos Version5.2

Juniper ≫ Junos Version5.3

Juniper ≫ Junos Version5.4

Juniper ≫ Junos Version5.5

Juniper ≫ Junos Version5.6

Juniper ≫ Junos Version5.7

Juniper ≫ Junos Version6.0

Juniper ≫ Junos Version6.1

Juniper ≫ Junos Version6.2

Juniper ≫ Junos Version6.3

Juniper ≫ Junos Version6.4

Juniper ≫ Junos Version7.0

Juniper ≫ Junos Version7.1

Juniper ≫ Junos Version7.2

Juniper ≫ Junos Version7.3

Juniper ≫ Junos Version7.4

Juniper ≫ Junos Version7.5

Juniper ≫ Junos Version7.6

Juniper ≫ Junos Version8.0

Juniper ≫ Junos Version8.1

Juniper ≫ Junos Version8.2

Juniper ≫ Junos Version8.3

Juniper ≫ Junos Version8.4

Juniper ≫ Junos Version9.0

Juniper ≫ Junos Version9.1

Juniper ≫ Junos Version9.2

Juniper ≫ Junos Version9.4

Juniper ≫ Junos Version9.5

Juniper ≫ Junos Version9.6

Juniper ≫ Junos Version11.4

Juniper ≫ Junos Version12.1x44

Juniper ≫ Junos Version12.1x45

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	5.94%	0.897

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10594

Vendor Advisory

http://osvdb.org/98369

http://secunia.com/advisories/55109

Vendor Advisory

http://www.securityfocus.com/bid/62962

http://www.securitytracker.com/id/1029175

https://exchange.xforce.ibmcloud.com/vulnerabilities/87847

https://nvd.nist.gov/vuln/detail/CVE-2013-6013

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6013

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6013

EUVD