Juniper Junos Config Commit Phase CVE-2013-6012 Remote Authentication Bypass Vulnerability

Bugtraq ID:	63389
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-6012
Remote:	Yes
Local:	No
Published:	Oct 28 2013 12:00AM
Updated:	Oct 28 2013 12:00AM
Credit:	Juniper Networks
Vulnerable:	Juniper JUNOS 12.1X45 Juniper JUNOS 12.1X44
Not Vulnerable:	Juniper JUNOS 12.1X45-D15 Juniper JUNOS 12.1X44-D20

Juniper Junos Config Commit Phase CVE-2013-6012 Remote Authentication Bypass Vulnerability

Juniper Junos is prone to a remote authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and gain unauthenticated access to the affected device. This may lead to further attacks.

Juniper Junos versions 12.1X44 and 12.1X45 vulnerable.

Juniper Junos Config Commit Phase CVE-2013-6012 Remote Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos Config Commit Phase CVE-2013-6012 Remote Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos Config Commit Phase CVE-2013-6012 Remote Authentication Bypass Vulnerability

References:

• 2013-10 Security Bulletin: Junos: Commit failure on SRX after upgrade to 12.1X44 (Juniper Networks)
  
• Juniper Networks Homepage (Juniper Networks)