CVE-2013-6013: Buffer Overflow
Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6013?
CVE-2013-6013 is considered a high-severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2013-6013?
To fix CVE-2013-6013, you should upgrade your Junos software to a version that includes the security patch, specifically to versions 10.4S14, 11.4R7-S2, 12.1X44-D15, or 12.1X45-D10 or later.
What systems are affected by CVE-2013-6013?
CVE-2013-6013 affects Juniper Junos versions prior to 10.4S14, 11.4R7-S2, 12.1X44-D15, and 12.1X45-D10 on SRX devices when using telnet pass-through authentication.
What types of attacks can exploit CVE-2013-6013?
CVE-2013-6013 can be exploited by remote attackers exploiting the buffer overflow vulnerability to execute arbitrary code.
Is CVE-2013-6013 a client-side or server-side vulnerability?
CVE-2013-6013 is considered a server-side vulnerability since it affects the flow daemon on affected Juniper SRX devices.