Juniper Networks Secure Access Unspecified Authentication Bypass Vulnerability

Bugtraq ID:	47237
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 01 2011 12:00AM
Updated:	Apr 01 2011 12:00AM
Credit:	The vendor
Vulnerable:	Juniper Secure Access 6000 SP 6000 Juniper Secure Access 6000 (NetScreen-SA 5000 Series) 0 Juniper Secure Access 4000 (NetScreen-SA 3000 Series) 0 Juniper Secure Access 4000 6.1R2 Juniper Secure Access 2000 6.0R1 Juniper Secure Access 2000 5.5R3 Juniper Secure Access 2000 5.5R1 Build 11711 Juniper Secure Access 2000 0 Juniper IVE OS 7.0r3 Juniper IVE OS 7.0r2 Juniper IVE OS 6.5r7 Juniper IVE OS 6.5r6 Juniper IVE OS 6.5R3.1 Juniper IVE OS 6.5R3 Juniper IVE OS 6.5R2 Juniper IVE OS 6.5R1 (Build 14599) Juniper IVE OS 6.5R1 Juniper IVE OS 6.4R5 Juniper IVE OS 6.3R7 Juniper IVE OS 6.0R3.12359 Juniper IVE OS 6.0
Not Vulnerable:	Juniper IVE OS 7.1r1 Juniper IVE OS 7.0r4 Juniper IVE OS 6.5r9

Juniper Networks Secure Access Unspecified Authentication Bypass Vulnerability

Juniper Networks Secure Access is prone to a remote authentication-bypass vulnerability due to an unspecified error.

Attackers can exploit this issue to bypass authentication on Windows 7 and Windows Vista systems.

Juniper Networks Secure Access Unspecified Authentication Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Networks Secure Access Unspecified Authentication Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

Juniper Networks Secure Access Unspecified Authentication Bypass Vulnerability

References:

• Juniper Networks Homepage (Juniper Networks)
  
• PSN-2011-03-187 Out of Cycle Security Bulletin (Juniper Networks)