CVE-2005-2640
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD
Description
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
Affected (133)
Products: Neoteris: Instant Virtual Extranet · Juniper: Netscreen Screenos, Netscreen 5gt, Netscreen Idp, Netscreen Idp 10, Netscreen Idp 100, Netscreen Idp 1000, Netscreen Idp 500 · Netscreen: Ns 10, Ns 100, Ns 204, Ns 500, Ns 50ns25, Netscreen Sa 5000 Series, Netscreen Sa 5020 Series, Netscreen Sa 5050 Series
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.0 |
Configuration B
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0 | |
| Version 3.0 | |
| Version 3.0.1_r1 | |
| Version 3.0.1_r1 | |
| Version 3.0.1_r1 | |
| Version 3.0.1_r1 | |
| All versions | |
| Version 4.2_r2.2 | |
| Version 4.2_r2.2 |
References (10)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Timeline
No history available yet.