← back
CVE-2006-2086

CVE-2006-2086

EPSS 67.3%
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device running IVE OS before 4.2r8.1, 5.0 before 5.0r6.1, 5.1 before 5.1r8, 5.2 before 5.2r4.1, or 5.3 before 5.3r2.1, allows remote attackers to execute arbitrary code via a long argument in the ProductName parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16568unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/19842http://securityreason.com/securityalert/819http://securitytracker.com/id?1016000https://exchange.xforce.ibmcloud.com/vulnerabilities/26077http://www.eeye.com/html/research/advisories/AD20060424.htmlhttp://www.juniper.net/support/security/alerts/PSN-2006-03-013.txthttp://www.kb.cert.org/vuls/id/477604http://www.osvdb.org/25001http://www.securityfocus.com/archive/1/432155/100/0/threadedhttp://www.securityfocus.com/bid/17712http://www.vupen.com/english/advisories/2006/1543