Juniper Networks Junos Multiple Services Man in the Middle Vulnerability

Bugtraq ID:	60521
Class:	Design Error
CVE:	CVE-2013-3970
Remote:	Yes
Local:	No
Published:	Jun 12 2013 12:00AM
Updated:	Jun 12 2013 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Juniper UAC OS 4.1r5 Juniper UAC OS 4.1r4 Juniper UAC OS 4.1r3 Juniper UAC OS 4.1r2 Juniper UAC OS 4.1r1 Juniper IVE OS 7.1r5 Juniper IVE OS 7.1r4 Juniper IVE OS 7.1r3 Juniper IVE OS 7.1r2 Juniper IVE OS 7.1r1 Juniper IVE OS 7.0r8 Juniper IVE OS 7.0r7 Juniper IVE OS 7.0r6 Juniper IVE OS 7.0r5 Juniper IVE OS 7.0r4 Juniper IVE OS 7.0r3 Juniper IVE OS 7.0r2
Not Vulnerable:	Juniper UAC OS 4.1r6 Juniper IVE OS 7.1r7

Juniper Networks Junos Multiple Services Man in the Middle Vulnerability

Juniper Networks Junos Pulse Secure Access Service and Pulse Access Control Service are prone to a security vulnerability that allows attackers to perform man-in-the-middle attacks.

Remote attackers can exploit this issue to gain access to sensitive information; other attacks are also possible.

Juniper Networks Junos Multiple Services Man in the Middle Vulnerability

References:

• Junos Pulse Access Control Service Homepage (Juniper Networks)
  
• Junos Pulse Secure Access Service Homepage (Juniper Networks)
  
• 2013-06 Security Bulletin: Secure Access (SSL VPN) and Access Control (UAC): Int (Juniper Networks)