CVE-2013-6618: Input Validation
First published: Tue Nov 05 2013(Updated: )
jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper JUNOS | <=10.4 | |
| Juniper JUNOS | =10.0 | |
| Juniper JUNOS | =10.1 | |
| Juniper JUNOS | =10.2 | |
| Juniper JUNOS | =10.3 | |
| Juniper JUNOS | =11.4 | |
| Juniper JUNOS | =12.1 | |
| Juniper JUNOS | =12.2 | |
| Juniper JUNOS | =12.3 | |
| <=10.4 | ||
| =10.0 | ||
| =10.1 | ||
| =10.2 | ||
| =10.3 | ||
| =11.4 | ||
| =12.1 | ||
| =12.2 | ||
| =12.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560
- http://secunia.com/advisories/54731
- http://www.exploit-db.com/exploits/29544
- http://www.securityfocus.com/bid/62305
- http://www.securitytracker.com/id/1029016
- http://www.senseofsecurity.com.au/advisories/SOS-13-003
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87011
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/juniper
- canonical/juniper junos
- version/juniper junos/10.4
- version/juniper junos/10.0
- version/juniper junos/10.1
- version/juniper junos/10.2
- version/juniper junos/10.3
- version/juniper junos/11.4
- version/juniper junos/12.1
- version/juniper junos/12.2
- version/juniper junos/12.3