NVD

Id
33897  
Name
CVE-2014-6379  
Description
Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and D30, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when a RADIUS accounting server is configured as [system accounting destination radius], creates an entry in /var/etc/pam_radius.conf, which might allow remote attackers to bypass authentication via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-14  
Modified Date
2014-10-24  
Seq
2014-6379  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175903 33897 CVE-2014-6379 70365  View
175904 33897 CVE-2014-6379 1031010  View
175905 33897 CVE-2014-6379 juniper-junos-cve20146379-sec-bypass(96905)  View
175906 33897 CVE-2014-6379 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10654  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15984 JVNDB-2014-004859 Juniper Junos における認証を回避される脆弱性 Juniper Junos は、RADIUS アカウンティングサーバが [system accounting destination radius] に設定されている場合、/var/etc/pam_radius.conf にエントリーを作成するため、認証を回避される脆弱性が存在します。 CVE-2014-6379 73671 CVE-2014-6379 33897 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004859.html 2014-10-08 2014-10-21 View