Detections
Analytics
Juniper Junos OpenSSL ASN.1 Memory Corruption (PSN-2012-07-645)
high Nessus Plugin ID 59989
Language:
Synopsis
The remote router has a memory corruption vulnerability.Description
According to its self-reported version number, the remote Junos router is using an outdated version of OpenSSL. Parsing malformed ASN.1 encoded data can result in memory corruption. This vulnerability can be triggered by attempting to parse untrusted data (e.g., an X.509 certificate).Solution
Apply the relevant Junos upgrade referenced in Juniper advisory PSN-2012-07-645.See Also
http://seclists.org/fulldisclosure/2012/Apr/210
https://www.openssl.org/news/secadv/20120419.txt
Plugin Details
Severity: High
ID: 59989
File Name: juniper_psn-2012-07-645.nasl
Version: 1.16
Type: combined
Family: Junos Local Security Checks
Published: 7/17/2012
Updated: 7/12/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:juniper:junos
Required KB Items: Host/Juniper/model, Host/Juniper/JUNOS/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/10/2012
Vulnerability Publication Date: 4/19/2012
Reference Information
CVE: CVE-2012-2110, CVE-2012-2131