Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.103966
Category:JunOS Local Security Checks
Title:Junos Stack Exhaustion Denial of Service Vulnerability
Summary:Denial of Service vulnerability due to stack exhaustion in glibc;used by Junos
Description:Summary:
Denial of Service vulnerability due to stack exhaustion in glibc
used by Junos

Vulnerability Insight:
A stack consumption vulnerability in the regcomp implementation
in the GNU C Library allows an attacker to cause a denial of service via a regular expression containing
adjacent repetition operators or adjacent bounded repetitions. Junos uses regular expressions in several
places within the CLI.

Vulnerability Impact:
Local attackers can cause a partial denial of service on services
provided by rpd.

Affected Software/OS:
Junos OS 10.4, 11.4, 12.1, 12.2, 12.3, 13.1, 13.2, 13.3

Solution:
New builds of Junos OS software are available from Juniper.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: BugTraq ID: 45233
Common Vulnerability Exposure (CVE) ID: CVE-2010-4051
http://www.securityfocus.com/bid/45233
Bugtraq: 20110107 GNU libc/regcomp(3) Multiple Vulnerabilities (Google Search)
http://www.securityfocus.com/archive/1/515589/100/0/threaded
CERT/CC vulnerability note: VU#912279
http://www.kb.cert.org/vuls/id/912279
http://www.exploit-db.com/exploits/15935
http://seclists.org/fulldisclosure/2011/Jan/78
http://cxib.net/stuff/proftpd.gnu.c
https://bugzilla.redhat.com/show_bug.cgi?id=645859
https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E
http://securitytracker.com/id?1024832
http://secunia.com/advisories/42547
http://securityreason.com/securityalert/8003
http://securityreason.com/achievement_securityalert/93
Common Vulnerability Exposure (CVE) ID: CVE-2010-4052
CopyrightThis script is Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.