Detections
Analytics
Juniper Junos NTP Server Amplification Remote DoS (JSA10613)
medium Nessus Plugin ID 77756
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the NTP daemon related to the handling of the 'monlist' command. A remote attacker can exploit this by forging a request that results in a distributed denial of service.Note that this issue only affects devices with NTP client or server enabled.
Solution
Apply the relevant Junos software release or workaround referenced in Juniper advisory JSA10613.See Also
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10613
Plugin Details
Severity: Medium
ID: 77756
File Name: juniper_jsa10613.nasl
Version: 1.7
Type: combined
Family: Junos Local Security Checks
Published: 9/19/2014
Updated: 7/12/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:ntp:ntp, cpe:/o:juniper:junos
Required KB Items: Host/Juniper/JUNOS/Version, Host/Juniper/JUNOS/BuildDate
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/8/2014
Vulnerability Publication Date: 4/29/2010
Reference Information
CVE: CVE-2013-5211
BID: 64692