Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
BID:34710
Info
Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
| Bugtraq ID: | 34710 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2009 12:00AM |
| Updated: | Apr 27 2009 06:16PM |
| Credit: | Richard Brain of ProCheckUp Ltd |
| Vulnerable: |
Juniper SSG 520 0 Juniper SSG 320 0 Juniper screenos 5.4 r10 Juniper screenos 6.2.0R1.0 Juniper screenos 6.1.0R1.0 Juniper NetScreen 208 0 |
| Not Vulnerable: |
Juniper screenos 6.2.R2 Juniper screenos 6.2.0R2.0 Juniper screenos 5.4.0R12 |
Discussion
Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
Juniper Networks ScreenOS is prone to a remote information-disclosure vulnerability.
A remote attacker can exploit this issue to retrieve potentially sensitive information that may aid in further attacks.
Juniper Networks ScreenOS is prone to a remote information-disclosure vulnerability.
A remote attacker can exploit this issue to retrieve potentially sensitive information that may aid in further attacks.
Exploit / POC
Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Juniper Networks ScreenOS 'about.html' Information Disclosure Vulnerability
References:
References:
- Juniper Networks Homepage (Juniper Networks)
- Juniper Advisory ([email protected])