CVE-2002-0234 NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion...
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | <= 2.6.1 | No fix listed |
References
- 20020201 NetScreen ScreenOS 2.6 Subject to Trust Interface DoS mailing-list
- 20020201 RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS mailing-list
- 20020205 NetScreen Response to ScreenOS Port Scan DoS Vulnerability mailing-list vendor-advisory
- netscreen-screenos-scan-dos(8057) patch vdb-entry vendor-advisory
- 4015 patch vdb-entry vendor-advisory