CVE-2002-0891 The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | = 2.5 | No fix listed |
| juniper netscreen screenos | = 2.5r1 | No fix listed |
| juniper netscreen screenos | = 2.5r2 | No fix listed |
| juniper netscreen screenos | = 2.5r6 | No fix listed |
| juniper netscreen screenos | = 2.6.1 | No fix listed |
| juniper netscreen screenos | = 2.6.1r1 | No fix listed |
| juniper netscreen screenos | = 2.6.1r2 | No fix listed |
| juniper netscreen screenos | = 2.6.1r3 | No fix listed |
| juniper netscreen screenos | = 2.6.1r4 | No fix listed |
| juniper netscreen screenos | = 2.6.1r5 | No fix listed |
| juniper netscreen screenos | = 2.7.1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r2 | No fix listed |
| juniper netscreen screenos | = 2.7.1r3 | No fix listed |
| juniper netscreen screenos | = 2.8_r1 | No fix listed |
| juniper netscreen screenos | = 2.10_r3 | No fix listed |
| juniper netscreen screenos | = 2.10_r4 | No fix listed |
| juniper netscreen screenos | = 3.0.0 | No fix listed |
| juniper netscreen screenos | = 3.0.0r1 | No fix listed |
| juniper netscreen screenos | = 3.0.0r2 | No fix listed |
| juniper netscreen screenos | = 3.0.0r3 | No fix listed |
| juniper netscreen screenos | = 3.0.0r4 | No fix listed |
| juniper netscreen screenos | = 3.0.1r1 | No fix listed |
References
- 20020527 Netscreen 25 unauthorised reboot issue mailing-list
- netscreen-screenos-username-dos(9186) vdb-entry vendor-advisory
- www.netscreen.com
- 4842 vdb-entry vendor-advisory