CVE-2013-4685
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
Desbordamiento de búfer en flowd en Juniper Junos v10.4 antes de v10.4S14, v11.4 antes de v11.4R7, v12.1 antes de v12.1R6, y v12.1X44 antes de v12.1X44-D15 para dispositivos SRX, cuando Captive Portal está habilitado con el rol forzado, permite a atacantes remotos ejecutar código arbitrario a través de peticiones HTTP manipuladas, también conocido como PR 849100.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-06-26 CVE Reserved
- 2013-07-11 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/95108 | Vdb Entry | |
| http://www.securityfocus.com/bid/61125 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://kb.juniper.net/JSA10574 | 2013-08-22 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx100 Search vendor "Juniper" for product "Srx100" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx110 Search vendor "Juniper" for product "Srx110" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1400 Search vendor "Juniper" for product "Srx1400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx210 Search vendor "Juniper" for product "Srx210" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx220 Search vendor "Juniper" for product "Srx220" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240 Search vendor "Juniper" for product "Srx240" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3400 Search vendor "Juniper" for product "Srx3400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3600 Search vendor "Juniper" for product "Srx3600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Search vendor "Juniper" for product "Srx550" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5600 Search vendor "Juniper" for product "Srx5600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5800 Search vendor "Juniper" for product "Srx5800" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 10.4 Search vendor "Juniper" for product "Junos" and version "10.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx650 Search vendor "Juniper" for product "Srx650" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx100 Search vendor "Juniper" for product "Srx100" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx110 Search vendor "Juniper" for product "Srx110" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1400 Search vendor "Juniper" for product "Srx1400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx210 Search vendor "Juniper" for product "Srx210" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx220 Search vendor "Juniper" for product "Srx220" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240 Search vendor "Juniper" for product "Srx240" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3400 Search vendor "Juniper" for product "Srx3400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3600 Search vendor "Juniper" for product "Srx3600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Search vendor "Juniper" for product "Srx550" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5600 Search vendor "Juniper" for product "Srx5600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5800 Search vendor "Juniper" for product "Srx5800" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 11.4 Search vendor "Juniper" for product "Junos" and version "11.4" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx650 Search vendor "Juniper" for product "Srx650" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx100 Search vendor "Juniper" for product "Srx100" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx110 Search vendor "Juniper" for product "Srx110" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1400 Search vendor "Juniper" for product "Srx1400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx210 Search vendor "Juniper" for product "Srx210" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx220 Search vendor "Juniper" for product "Srx220" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240 Search vendor "Juniper" for product "Srx240" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3400 Search vendor "Juniper" for product "Srx3400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3600 Search vendor "Juniper" for product "Srx3600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Search vendor "Juniper" for product "Srx550" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5600 Search vendor "Juniper" for product "Srx5600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5800 Search vendor "Juniper" for product "Srx5800" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1 Search vendor "Juniper" for product "Junos" and version "12.1" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx650 Search vendor "Juniper" for product "Srx650" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx100 Search vendor "Juniper" for product "Srx100" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx110 Search vendor "Juniper" for product "Srx110" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1400 Search vendor "Juniper" for product "Srx1400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx210 Search vendor "Juniper" for product "Srx210" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx220 Search vendor "Juniper" for product "Srx220" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240 Search vendor "Juniper" for product "Srx240" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3400 Search vendor "Juniper" for product "Srx3400" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3600 Search vendor "Juniper" for product "Srx3600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Search vendor "Juniper" for product "Srx550" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5600 Search vendor "Juniper" for product "Srx5600" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5800 Search vendor "Juniper" for product "Srx5800" | - | - |
Affected
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | 12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44" | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx650 Search vendor "Juniper" for product "Srx650" | - | - |
Affected
|