Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
BID:15402
Info
Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 15402 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 14 2005 12:00AM |
| Updated: | Nov 14 2005 12:00AM |
| Credit: | Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group. |
| Vulnerable: |
Juniper T-series Router T320 Juniper M-series Router M5 Juniper M-series Router M40e Juniper M-series Router M40 Juniper M-series Router M20 Juniper M-series Router M160 Juniper M-series Router M10 Juniper J-series Services Router J6300 Juniper J-series Services Router J4300 Juniper J-series Services Router J2300 Juniper E-series Router |
| Not Vulnerable: | |
Discussion
Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
Various Juniper Networks M, T, J, and E Series Routers are affected by multiple unspecified vulnerabilities. The reported issues include buffer overflows, format strings, and denial of service vulnerabilities.
These issues were discovered with the PROTOS ISAKMP Test Suite and are related to handling of malformed IKEv1 traffic.
Various Juniper Networks M, T, J, and E Series Routers are affected by multiple unspecified vulnerabilities. The reported issues include buffer overflows, format strings, and denial of service vulnerabilities.
These issues were discovered with the PROTOS ISAKMP Test Suite and are related to handling of malformed IKEv1 traffic.
Exploit / POC
Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
These issues can be reproduced using the PROTOS ISAKMP Test Suite. It should be noted that the Test Suite may trigger the vulnerabilities but is not designed to exploit the format string and buffer overflow issues to execute arbitrary code.
These issues can be reproduced using the PROTOS ISAKMP Test Suite. It should be noted that the Test Suite may trigger the vulnerabilities but is not designed to exploit the format string and buffer overflow issues to execute arbitrary code.
Solution / Fix
Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
Solution:
The vendor has reported addressed these issues in E Series Routers in releases 5-2-4p0-8, 5-2-5, 5-3-4p0-5, 6-0-2p0-5, 6-0-3, 6-1-1p0-7, 6-1-2, 7-0-0p0-1, 7-0-1, and 7-1-0.
M, T, and J Series Routers releases 6.4 and later address this issue in releases built on July 28, 2005 and after.
These fixes have not been confirmed by Symantec.
Solution:
The vendor has reported addressed these issues in E Series Routers in releases 5-2-4p0-8, 5-2-5, 5-3-4p0-5, 6-0-2p0-5, 6-0-3, 6-1-1p0-7, 6-1-2, 7-0-0p0-1, 7-0-1, and 7-1-0.
M, T, and J Series Routers releases 6.4 and later address this issue in releases built on July 28, 2005 and after.
These fixes have not been confirmed by Symantec.
References
Juniper Networks Routers ISAKMP IKE Traffic Multiple Unspecified Vulnerabilities
References:
References:
- Juniper Networks Homepage (Juniper Networks)
- Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)