CVE-2013-6013

Juniper Junos Remote Code Execution via Crafted Telnet Message

Title source: llm
STIX 2.1

Description

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/62962
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/98369
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029175
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/87847
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55109

Scores

EPSS 0.0594
EPSS Percentile 90.7%

Details

CWE
CWE-119
Status published
Products (40)
juniper/junos 4.0
juniper/junos 4.1
juniper/junos 4.2
juniper/junos 4.3
juniper/junos 4.4
juniper/junos 5.0
juniper/junos 5.1
juniper/junos 5.2
juniper/junos 5.3
juniper/junos 5.4
... and 30 more
Published Oct 17, 2013
Tracked Since Feb 18, 2026