ID CVE-2006-2086
Summary Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device running IVE OS before 4.2r8.1, 5.0 before 5.0r6.1, 5.1 before 5.1r8, 5.2 before 5.2r4.1, or 5.3 before 5.3r2.1, allows remote attackers to execute arbitrary code via a long argument in the ProductName parameter.
References
Vulnerable Configurations
  • Juniper JuniperSetup Control
    cpe:2.3:a:juniper:junipersetup_control
CVSS
Base: 7.5 (as of 30-04-2006 - 17:38)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
exploit-db via4
description Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow. CVE-2006-2086. Remote exploit for windows platform
id EDB-ID:16568
last seen 2016-02-02
modified 2010-05-09
published 2010-05-09
reporter metasploit
source https://www.exploit-db.com/download/16568/
title Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow
metasploit via4
description This module exploits a stack buffer overflow in the JuniperSetupDLL.dll library which is called by the JuniperSetup.ocx ActiveX control, as part of the Juniper SSL-VPN (IVE) appliance. By specifying an overly long string to the ProductName object parameter, the stack is overwritten.
id MSF:EXPLOIT/WINDOWS/BROWSER/JUNIPER_SSLVPN_IVE_SETUPDLL
last seen 2019-03-27
modified 2017-11-08
published 2009-07-30
reliability Normal
reporter Rapid7
source https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/juniper_sslvpn_ive_setupdll.rb
title Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow
packetstorm via4
data source https://packetstormsecurity.com/files/download/83003/juniper_sslvpn_ive_setupdll.rb.txt
id PACKETSTORM:83003
last seen 2016-12-05
published 2009-11-26
reporter patrick
source https://packetstormsecurity.com/files/83003/Juniper-SSL-VPN-IVE-JuniperSetupDLL.dll-ActiveX-Control-Buffer-Overflow.html
title Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow
refmap via4
bid 17712
bugtraq 20060426 [EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow
cert-vn VU#477604
confirm http://www.juniper.net/support/security/alerts/PSN-2006-03-013.txt
misc http://www.eeye.com/html/research/advisories/AD20060424.html
osvdb 25001
sectrack 1016000
secunia 19842
sreason 819
vupen ADV-2006-1543
xf juniper-ive-activex-bo(26077)
Last major update 07-03-2011 - 21:35
Published 29-04-2006 - 06:02
Last modified 18-10-2018 - 12:38
Back to Top