Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.106040 |
Kategorie: | JunOS Local Security Checks |
Titel: | Junos Fail-Open Unauthenticated Root Access Vulnerability |
Zusammenfassung: | Junos OS is prone to a unauthenticated root access vulnerability. |
Beschreibung: | Summary: Junos OS is prone to a unauthenticated root access vulnerability. Vulnerability Insight: When the pam.conf file is corrupted in certain ways, it may allow connection to the device as the root user with no password. This 'fail-open' behavior allows an attacker who can specifically modify the file to gain full access to the device. Note that inadvertent manipulation of the pam.conf by an authorized administrator can also lead to unauthenticated root access to the device. Vulnerability Impact: When the pam.conf file is corrupted in certain ways attackers may connect as root user with no password. Affected Software/OS: Junos OS 12.1, 12.3, 13.2, 13.3, and 14.1 Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C |
Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2015-7751 http://www.securitytracker.com/id/1033817 |
Copyright | This script is Copyright (C) 2015 Greenbone Networks GmbH |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |