According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability.  Sending a specially crafted bootstrap message to the PIM router can cause the rpd routing daemon to crash.
A remote, unauthenticated attacker could exploit this to make the router unresponsive.

According to the vendor's advisory, this issue may be difficult to reliably exploit.

According to its self-reported version number, the remote Juniper router is running a version of Junos that is affected by a denial of service vulnerability.  Sending an ICMP ping with the record-route or timestamp options can crash an L3VPN PE router with either of the following configurations :

  - Point-to-Multipoint LSPs that are used as next hops     in configuration of static routes to customers' networks

  - The 'l3vpn-composite-nexthop' and 'indirect-next-hop'     routing-options are enabled

A remote, unauthenticated attacker could exploit this to crash the router.

According to its self-reported version number, the remote Juniper router is running a version of Junos with a denial of service vulnerability.  Receiving a burst of fragmented ICMP packets can cause the router to become unresponsive until it is rebooted.

A remote, unauthenticated attacker could exploit this to make the router unresponsive.

According to its self-reported version number, the remote Juniper device is running a version of Junos with a security bypass vulnerability.  When the device is configured to perform IPv6 in IPv4 tunneling, policies that apply to the encapsulated datagram are not enforced.

A remote, unauthenticated attacker could exploit this to bypass security restrictions.

According to its self-reported version number, the remote Juniper router has a vulnerable Extended DHCP Relay Agent.  Any interface which has the Extended DHCP Relay Agent enabled intercepts unicast DHCP reply packets.  A remote attacker could exploit this by acting as a malicious DHCP server, sending specially crafted unicast DHCP reply packets through the router.
This could result in traffic being redirected.

According to its self-reported version number, the installation of the Juniper Junos operating system running on the remote host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The remote host is running Junos, an operating system for Juniper devices.

It is possible to read the Junos version number by logging into the device via SSH, using SNMP, or viewing the web interface.

ID	Name	Severity
55938	Juniper Junos PIM rpd Crafted Boot Message Remote DoS (PSN-2011-07-296)	medium
55937	Juniper Junos ICMP Ping 'composite next-hop' Remote DoS (PSN-2011-07-297)	high
55936	Juniper Junos Fragmented ICMP Packet Handling Remote DoS (PSN-2011-07-298)	medium
55935	Juniper Junos IPv6 over IPv4 Security Policy Bypass (PSN-2011-07-299)	medium
55934	Juniper Junos Extended DHCP Relay Agent Traffic Redirection (PSN-2011-07-300)	low
55933	Juniper Junos Unsupported Version Detection	critical
55932	Junos Version Detection	info

Detections

Analytics

Junos Local Security Checks Family for Nessus

medium

high

medium

medium

low

critical

info