Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-3567

Overview
Vulnerability Score	4.3
CVE Id	CVE-2006-3567
Last Modified	07 Mar 2011 09:38:57
Published	12 Jul 2006 09:05:00
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE
Access Vector	NETWORK
Access Complexity	MEDIUM
Authentication	NONE

CVE-2006-3567

Summary

Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field.

Vulnerable Systems

References

XF - juniper-networks-logging-xss(27645)

VUPEN - ADV-2006-2741

BID - 18926

BUGTRAQ - 20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability

SECTRACK - 1016462

SECUNIA - 20990

OSVDB - 27131

SREASON - 1218