CVE-2013-4685
11.07.2013, 14:55
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.Enginsight
| Vendor | Product | Version |
|---|---|---|
| juniper | junos | 10.4 |
| juniper | junos | 11.4 |
| juniper | junos | 12.1 |
| juniper | junos | 12.1x44:x44 |
| juniper | srx100 | - |
| juniper | srx110 | - |
| juniper | srx1400 | - |
| juniper | srx210 | - |
| juniper | srx220 | - |
| juniper | srx240 | - |
| juniper | srx3400 | - |
| juniper | srx3600 | - |
| juniper | srx550 | - |
| juniper | srx5600 | - |
| juniper | srx5800 | - |
| juniper | srx650 | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration