If you are using a Juniper Netscreen as a DHCP server you may find that when rebooting the device the DNS server entries for the DHCP change to the entries of the untrust port. This is down to the default DNS override settings and they can be changed either by using the GUI or Shell commands. I will show both ways below:
GUI:
- Log into the juniper and select Network > Interfaces > untrust port > Edit
- Deselect the setting Automatic Update DHCP Server Parameters
Shell:
Login to the shell (i.e. using Putty) then type the following command to disable the setting on the untrust port:
unset interface untrust dhcp client settings update-dhcpserver
Cisco Security Advisories
- Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021On March 25, 2021, the OpenSSL Project released a security advisory, OpenSSL Security Advisory [25 March 2021], that disclosed two vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user or device, or to […]
- Cisco IOS XR Software Command Injection VulnerabilityA vulnerability in the CLI of Cisco IOS XR 64-Bit Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges on the underlying Linux operating system (OS) of an affected device. This vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker […]
- Cisco Small Business RV Series Routers Link Layer Discovery Protocol VulnerabilitiesMultiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For […]
- Cisco AnyConnect Secure Mobility Client Denial of Service VulnerabilityA vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the device. The vulnerability is due to insufficient validation of user-supplied […]
Recent Comments