CVE-2002-2234 NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscreen screenos | = 2.7.1 | No fix listed |
| netscreen screenos | = 2.8 | No fix listed |
| netscreen screenos | = 3.0 | No fix listed |
| netscreen screenos | = 3.1 | No fix listed |
| netscreen screenos | = 4.0 | No fix listed |
References
- 20021125 Netscreen Malicious URL feature can be bypassed by fragmenting the request mailing-list
- 20021125 'Malicious-URL' Feature may be Circumvented Using IP Fragmentation mailing-list
- 20021125 Netscreen Malicious URL feature can be bypassed by fragmenting the request mailing-list
- 20021125 'Malicious-URL' Feature may be Circumvented Using IP Fragmentation mailing-list
- netscreen-fragmented-url-bypass(10699) vdb-entry
- 6245 patch vdb-entry