CVE:CVE-2013-4685
CNNVD:CNNVD-201307-229
Juniper Networks Juniper Junos是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。
SRX系列服务器网关设备上的Juniper Junos 10.4S14之前的10.4版本，11.4R7之前的11.4版本，12.1R6之前的12.1版本，12.1X44-D15之前的12.1X44版本中的flowd（ Flow守护进程）中存在缓冲区溢出漏洞。当SRX系列设备通过UAC（统一权限控制）启用Captive Portal功能时，远程攻击者可通过发送特制的HTTP请求利用该漏洞执行任意代码。
solution:Upgrade juniper junos to a higher version than 10.4,11.4,12.1,12.1x44,and avoid the version 10.4,11.4,12.1,12.1x44; Upgrade juniper srx100 to a higher version than -; Upgrade juniper srx110 to a higher version than -; Upgrade juniper srx1400 to a higher version than -; Upgrade juniper srx210 to a higher version than -; Upgrade juniper srx220 to a higher version than -; Upgrade juniper srx240 to a higher version than -; Upgrade juniper srx3400 to a higher version than -; Upgrade juniper srx3600 to a higher version than -; Upgrade juniper srx550 to a higher version than -; Upgrade juniper srx5600 to a higher version than -; Upgrade juniper srx5800 to a higher version than -; Upgrade juniper srx650 to a higher version than -