CVE-2002-2234

Published: Dec 31, 2002Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.

Affected (5)

Products: Netscreen: Screenos

Netscreen

1 product

Screenos

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Netscreen Screenos	Version 2.7.1
Netscreen Screenos	Version 2.8
Netscreen Screenos	Version 3.0
Netscreen Screenos	Version 3.1
Netscreen Screenos	Version 4.0

Related CWEs

CWE-16

References (12)

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html

Source: cve@mitre.org

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html

Source: cve@mitre.org

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0347.html

Source: cve@mitre.org

http://www.iss.net/security_center/static/10699.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/6245

Source: cve@mitre.org

Patch

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html