J. Oquendo | 1 Apr 2010 18:08
Favicon

Juniper SRX Critical Denial of Service Vulnerability


*Juniper SRX Critical Denial of Service Vulnerability*

*Overview*
According to Google Finance: /Juniper Networks, Inc. designs, develops
and sells products and services that together provide its customers
with network infrastructure that creates responsive and trusted
environments for accelerating the deployment of services and
applications over a single network. The Company serves the networking
requirements of global service providers, enterprises and public
sector organizations, which view the network to their success. The
Company offers a product portfolio, which spans routing, switching,
security, application acceleration, identity policy and control, and
management designed to provide performance, choice and flexibility. The
Company operations are organized into two segments: infrastructure and
service layer technologies (SLT). The Company's infrastructure segment
offers scalable routing and switching products that are used to control
and direct network traffic from the core, through the edge, aggregation
and the customer premise equipment level. /

*I. Description*

A Dual-Homed Swapfile Overflow Error [1] can occur under controlled
conditions causing multiple Denials of Service on Juniper SRX
platforms. In a controlled research environment, we tested against an
SRX 240 and believe all versions of the SRX are vulnerable to the
attack.

Juniper's SRX 240 has an input rating of 100-240V~ 50-60Hz
2.5A which is a standard for the form factor and a typical power
(Continue reading)


Gmane