First published: Thu Oct 17 2013(Updated: )
Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Juniper JUNOS | <=10.4 | |
Juniper JUNOS | =4.0 | |
Juniper JUNOS | =4.1 | |
Juniper JUNOS | =4.2 | |
Juniper JUNOS | =4.3 | |
Juniper JUNOS | =4.4 | |
Juniper JUNOS | =5.0 | |
Juniper JUNOS | =5.1 | |
Juniper JUNOS | =5.2 | |
Juniper JUNOS | =5.3 | |
Juniper JUNOS | =5.4 | |
Juniper JUNOS | =5.5 | |
Juniper JUNOS | =5.6 | |
Juniper JUNOS | =5.7 | |
Juniper JUNOS | =6.0 | |
Juniper JUNOS | =6.1 | |
Juniper JUNOS | =6.2 | |
Juniper JUNOS | =6.3 | |
Juniper JUNOS | =6.4 | |
Juniper JUNOS | =7.0 | |
Juniper JUNOS | =7.1 | |
Juniper JUNOS | =7.2 | |
Juniper JUNOS | =7.3 | |
Juniper JUNOS | =7.4 | |
Juniper JUNOS | =7.5 | |
Juniper JUNOS | =7.6 | |
Juniper JUNOS | =8.0 | |
Juniper JUNOS | =8.1 | |
Juniper JUNOS | =8.2 | |
Juniper JUNOS | =8.3 | |
Juniper JUNOS | =8.4 | |
Juniper JUNOS | =9.0 | |
Juniper JUNOS | =9.1 | |
Juniper JUNOS | =9.2 | |
Juniper JUNOS | =9.4 | |
Juniper JUNOS | =9.5 | |
Juniper JUNOS | =9.6 | |
Juniper JUNOS | =11.4 | |
Juniper JUNOS | =12.1x44 | |
Juniper JUNOS | =12.1x45 | |
Juniper SRX100 | ||
Juniper SRX110 | ||
Juniper SRX1400 | ||
Juniper SRX210 | ||
Juniper SRX220 | ||
Juniper SRX240 | ||
Juniper SRX3400 | ||
Juniper SRX3600 | ||
Juniper SRX550 | ||
juniper srx5600 | ||
Juniper SRX5800 | ||
Juniper SRX650 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-6013 is considered a high-severity vulnerability due to the potential for remote code execution.
To fix CVE-2013-6013, you should upgrade your Junos software to a version that includes the security patch, specifically to versions 10.4S14, 11.4R7-S2, 12.1X44-D15, or 12.1X45-D10 or later.
CVE-2013-6013 affects Juniper Junos versions prior to 10.4S14, 11.4R7-S2, 12.1X44-D15, and 12.1X45-D10 on SRX devices when using telnet pass-through authentication.
CVE-2013-6013 can be exploited by remote attackers exploiting the buffer overflow vulnerability to execute arbitrary code.
CVE-2013-6013 is considered a server-side vulnerability since it affects the flow daemon on affected Juniper SRX devices.