CVE-2006-2086
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device running IVE...
- Published
- Apr 29, 2006
- Updated
- Aug 7, 2024
- Assigning CNA
- mitre
- Evidence observed
- May 9, 2010
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:PHigh · next 30 days
- Percentile
- 99.3%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device running IVE OS before 4.2r8.1, 5.0 before 5.0r6.1, 5.1 before 5.1r8, 5.2 before 5.2r4.1, or 5.3 before 5.3r2.1, allows remote attackers to execute arbitrary code via a long argument in the ProductName parameter.
Sources
modules/exploits/windows/browser/juniper_sslvpn_ive_setupdll.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/browser/juniper_sslvpn_ive_setupdll.platform)
- verification: check_not_declared($.exploit_windows/browser/juniper_sslvpn_ive_setupdll.check)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.