5

CVE-2005-2640

Exploit
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Netscreen Screenos Version 1.7
Juniper ≫ Netscreen Screenos Version 1.64
Juniper ≫ Netscreen Screenos Version 1.66
Juniper ≫ Netscreen Screenos Version 1.66_r2
Juniper ≫ Netscreen Screenos Version 1.73_r1
Juniper ≫ Netscreen Screenos Version 1.73_r2
Juniper ≫ Netscreen Screenos Version 2.0.1_r8
Juniper ≫ Netscreen Screenos Version 2.1
Juniper ≫ Netscreen Screenos Version 2.1_r6
Juniper ≫ Netscreen Screenos Version 2.1_r7
Juniper ≫ Netscreen Screenos Version 2.5
Juniper ≫ Netscreen Screenos Version 2.5r1
Juniper ≫ Netscreen Screenos Version 2.5r2
Juniper ≫ Netscreen Screenos Version 2.5r6
Juniper ≫ Netscreen Screenos Version 2.6.0
Juniper ≫ Netscreen Screenos Version 2.6.1
Juniper ≫ Netscreen Screenos Version 2.6.1r1
Juniper ≫ Netscreen Screenos Version 2.6.1r2
Juniper ≫ Netscreen Screenos Version 2.6.1r3
Juniper ≫ Netscreen Screenos Version 2.6.1r4
Juniper ≫ Netscreen Screenos Version 2.6.1r5
Juniper ≫ Netscreen Screenos Version 2.6.1r6
Juniper ≫ Netscreen Screenos Version 2.6.1r7
Juniper ≫ Netscreen Screenos Version 2.6.1r8
Juniper ≫ Netscreen Screenos Version 2.6.1r9
Juniper ≫ Netscreen Screenos Version 2.6.1r10
Juniper ≫ Netscreen Screenos Version 2.6.1r11
Juniper ≫ Netscreen Screenos Version 2.6.1r12
Juniper ≫ Netscreen Screenos Version 2.7.1
Juniper ≫ Netscreen Screenos Version 2.7.1r1
Juniper ≫ Netscreen Screenos Version 2.7.1r2
Juniper ≫ Netscreen Screenos Version 2.7.1r3
Juniper ≫ Netscreen Screenos Version 2.8
Juniper ≫ Netscreen Screenos Version 2.8_r1
Juniper ≫ Netscreen Screenos Version 2.10_r3
Juniper ≫ Netscreen Screenos Version 2.10_r4
Juniper ≫ Netscreen Screenos Version 3.0.0
Juniper ≫ Netscreen Screenos Version 3.0.0r1
Juniper ≫ Netscreen Screenos Version 3.0.0r2
Juniper ≫ Netscreen Screenos Version 3.0.0r3
Juniper ≫ Netscreen Screenos Version 3.0.0r4
Juniper ≫ Netscreen Screenos Version 3.0.1
Juniper ≫ Netscreen Screenos Version 3.0.1r1
Juniper ≫ Netscreen Screenos Version 3.0.1r2
Juniper ≫ Netscreen Screenos Version 3.0.1r3
Juniper ≫ Netscreen Screenos Version 3.0.1r4
Juniper ≫ Netscreen Screenos Version 3.0.1r5
Juniper ≫ Netscreen Screenos Version 3.0.1r6
Juniper ≫ Netscreen Screenos Version 3.0.1r7
Juniper ≫ Netscreen Screenos Version 3.0.2
Juniper ≫ Netscreen Screenos Version 3.0.3
Juniper ≫ Netscreen Screenos Version 3.0.3_r1.1
Juniper ≫ Netscreen Screenos Version 3.0.3r1
Juniper ≫ Netscreen Screenos Version 3.0.3r2
Juniper ≫ Netscreen Screenos Version 3.0.3r3
Juniper ≫ Netscreen Screenos Version 3.0.3r4
Juniper ≫ Netscreen Screenos Version 3.0.3r5
Juniper ≫ Netscreen Screenos Version 3.0.3r6
Juniper ≫ Netscreen Screenos Version 3.0.3r7
Juniper ≫ Netscreen Screenos Version 3.0.3r8
Juniper ≫ Netscreen Screenos Version 3.1.0
Juniper ≫ Netscreen Screenos Version 3.1.0r1
Juniper ≫ Netscreen Screenos Version 3.1.0r2
Juniper ≫ Netscreen Screenos Version 3.1.0r3
Juniper ≫ Netscreen Screenos Version 3.1.0r4
Juniper ≫ Netscreen Screenos Version 3.1.0r5
Juniper ≫ Netscreen Screenos Version 3.1.0r6
Juniper ≫ Netscreen Screenos Version 3.1.0r7
Juniper ≫ Netscreen Screenos Version 3.1.0r8
Juniper ≫ Netscreen Screenos Version 3.1.0r9
Juniper ≫ Netscreen Screenos Version 3.1.0r10
Juniper ≫ Netscreen Screenos Version 3.1.0r11
Juniper ≫ Netscreen Screenos Version 3.1.0r12
Juniper ≫ Netscreen Screenos Version 3.1.1_r2
Juniper ≫ Netscreen Screenos Version 4.0.0
Juniper ≫ Netscreen Screenos Version 4.0.0 Edition dial
Juniper ≫ Netscreen Screenos Version 4.0.0r1
Juniper ≫ Netscreen Screenos Version 4.0.0r2
Juniper ≫ Netscreen Screenos Version 4.0.0r3
Juniper ≫ Netscreen Screenos Version 4.0.0r4
Juniper ≫ Netscreen Screenos Version 4.0.0r5
Juniper ≫ Netscreen Screenos Version 4.0.0r6
Juniper ≫ Netscreen Screenos Version 4.0.0r7
Juniper ≫ Netscreen Screenos Version 4.0.0r8
Juniper ≫ Netscreen Screenos Version 4.0.0r9
Juniper ≫ Netscreen Screenos Version 4.0.0r10
Juniper ≫ Netscreen Screenos Version 4.0.0r11
Juniper ≫ Netscreen Screenos Version 4.0.0r12
Juniper ≫ Netscreen Screenos Version 4.0.1
Juniper ≫ Netscreen Screenos Version 4.0.1r1
Juniper ≫ Netscreen Screenos Version 4.0.1r2
Juniper ≫ Netscreen Screenos Version 4.0.1r3
Juniper ≫ Netscreen Screenos Version 4.0.1r4
Juniper ≫ Netscreen Screenos Version 4.0.1r5
Juniper ≫ Netscreen Screenos Version 4.0.1r6
Juniper ≫ Netscreen Screenos Version 4.0.1r7
Juniper ≫ Netscreen Screenos Version 4.0.1r8
Juniper ≫ Netscreen Screenos Version 4.0.1r9
Juniper ≫ Netscreen Screenos Version 4.0.1r10
Juniper ≫ Netscreen Screenos Version 4.0.2
Juniper ≫ Netscreen Screenos Version 4.0.3
Juniper ≫ Netscreen Screenos Version 4.0.3r1
Juniper ≫ Netscreen Screenos Version 4.0.3r2
Juniper ≫ Netscreen Screenos Version 4.0.3r3
Juniper ≫ Netscreen Screenos Version 4.0.3r4
Juniper ≫ Netscreen Screenos Version 5.0.0
Juniper ≫ Netscreen Screenos Version 5.1.0
Juniper ≫ Netscreen Screenos Version 5.1.0r3a
Juniper ≫ Netscreen Screenos Version 5.2.0
Netscreen ≫ Ns-100 Version 3.0_.pe1.0
Netscreen ≫ Ns-204 Version 5.0.0_r6.0
Netscreen ≫ Ns-204 Version 0110.0_11_4.0_r10.0
Netscreen ≫ Ns-204 Version 0110.0_11_5.1.0_r3a
Netscreen ≫ Ns-500 Version 4110.0_11_4.0_r10.0
Netscreen ≫ Ns-500 Version 4110.0_11_5.1.0_r3a
Netscreen ≫ Ns-50ns25 Version 5.0.0_r6.0
Juniper ≫ Netscreen-5gt Version 5.0
Juniper ≫ Netscreen-idp Version 3.0
Juniper ≫ Netscreen-idp Version 3.0r1
Juniper ≫ Netscreen-idp Version 3.0r2
Juniper ≫ Netscreen-idp 10 Version 3.0.1_r1
Juniper ≫ Netscreen-idp 100 Version 3.0.1_r1
Juniper ≫ Netscreen-idp 1000 Version 3.0.1_r1
Juniper ≫ Netscreen-idp 500 Version 3.0.1_r1
Netscreen ≫ Netscreen-sa 5020 Series Version 4.2_r2.2
Netscreen ≫ Netscreen-sa 5050 Series Version 4.2_r2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.09% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=112438068426034&w=2
http://secunia.com/advisories/16474/
Vendor Advisory
http://securitytracker.com/id?1014728
http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/14595
Exploit