CVE-2002-2266 NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscreen screenos | = 2.8 | No fix listed |
| netscreen screenos | = 3.0 | No fix listed |
| netscreen screenos | = 3.1 | No fix listed |
| netscreen screenos | = 4.0 | No fix listed |
References
- 20021125 Potential H.323 Denial of Service mailing-list
- 6250 patch vdb-entry
- netscreen-h323-dos(10700) vdb-entry