Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.106040
Kategorie:JunOS Local Security Checks
Titel:Junos Fail-Open Unauthenticated Root Access Vulnerability
Zusammenfassung:Junos OS is prone to a unauthenticated root access vulnerability.
Beschreibung:Summary:
Junos OS is prone to a unauthenticated root access vulnerability.

Vulnerability Insight:
When the pam.conf file is corrupted in certain ways, it may allow
connection to the device as the root user with no password. This 'fail-open' behavior allows an
attacker who can specifically modify the file to gain full access to the device. Note that inadvertent
manipulation of the pam.conf by an authorized administrator can also lead to unauthenticated root
access to the device.

Vulnerability Impact:
When the pam.conf file is corrupted in certain ways attackers may
connect as root user with no password.

Affected Software/OS:
Junos OS 12.1, 12.3, 13.2, 13.3, and 14.1

Solution:
New builds of Junos OS software are available from Juniper.

CVSS Score:
6.9

CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-7751
http://www.securitytracker.com/id/1033817
CopyrightThis script is Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.