CVE-2004-0467

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14049
http://securitytracker.com/id?1013039
http://www.kb.cert.org/vuls/id/409555Patch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/JSHA-68ZJCQPatch, Third Party Advisory, US Government Resource
http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=enPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-081.html
http://www.securityfocus.com/bid/12379Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19094
http://secunia.com/advisories/14049
http://securitytracker.com/id?1013039
http://www.kb.cert.org/vuls/id/409555Patch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/JSHA-68ZJCQPatch, Third Party Advisory, US Government Resource
http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=enPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-081.html
http://www.securityfocus.com/bid/12379Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19094

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-04685.0Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and devi CVE-2004-046910.0Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-41 CVE-2004-04707.5BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the Securi CVE-2004-04712.1BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping se CVE-2004-04732.6Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which a CVE-2004-04745.1Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic CVE-2004-04755.1The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double ba CVE-2004-04765.0Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet CVE-2004-047710.0Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts us CVE-2004-04782.6Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite CVE-2004-04795.0Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables CVE-2004-048010.0Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that us