1 Apr 2010 18:08
Juniper SRX Critical Denial of Service Vulnerability
J. Oquendo <sil <at> infiltrated.net>
2010-04-01 16:08:34 GMT
2010-04-01 16:08:34 GMT
*Juniper SRX Critical Denial of Service Vulnerability* *Overview* According to Google Finance: /Juniper Networks, Inc. designs, develops and sells products and services that together provide its customers with network infrastructure that creates responsive and trusted environments for accelerating the deployment of services and applications over a single network. The Company serves the networking requirements of global service providers, enterprises and public sector organizations, which view the network to their success. The Company offers a product portfolio, which spans routing, switching, security, application acceleration, identity policy and control, and management designed to provide performance, choice and flexibility. The Company operations are organized into two segments: infrastructure and service layer technologies (SLT). The Company's infrastructure segment offers scalable routing and switching products that are used to control and direct network traffic from the core, through the edge, aggregation and the customer premise equipment level. / *I. Description* A Dual-Homed Swapfile Overflow Error [1] can occur under controlled conditions causing multiple Denials of Service on Juniper SRX platforms. In a controlled research environment, we tested against an SRX 240 and believe all versions of the SRX are vulnerable to the attack. Juniper's SRX 240 has an input rating of 100-240V~ 50-60Hz 2.5A which is a standard for the form factor and a typical power(Continue reading)
RSS Feed