CVE-2005-2640 Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usern...
MediumCVSS 5.0
EPSS 7.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neoteris instant virtual extranet | = 3.0 | No fix listed |
| neoteris instant virtual extranet | = 3.1 | No fix listed |
| neoteris instant virtual extranet | = 3.2 | No fix listed |
| neoteris instant virtual extranet | = 3.3 | No fix listed |
| neoteris instant virtual extranet | = 3.3.1 | No fix listed |
| juniper netscreen screenos | = 1.7 | No fix listed |
| juniper netscreen screenos | = 1.64 | No fix listed |
| juniper netscreen screenos | = 1.66 | No fix listed |
| juniper netscreen screenos | = 1.66_r2 | No fix listed |
| juniper netscreen screenos | = 1.73_r1 | No fix listed |
| juniper netscreen screenos | = 1.73_r2 | No fix listed |
| juniper netscreen screenos | = 2.0.1_r8 | No fix listed |
| juniper netscreen screenos | = 2.1 | No fix listed |
| juniper netscreen screenos | = 2.1_r6 | No fix listed |
| juniper netscreen screenos | = 2.1_r7 | No fix listed |
| juniper netscreen screenos | = 2.5 | No fix listed |
| juniper netscreen screenos | = 2.5r1 | No fix listed |
| juniper netscreen screenos | = 2.5r2 | No fix listed |
| juniper netscreen screenos | = 2.5r6 | No fix listed |
| juniper netscreen screenos | = 2.6.0 | No fix listed |
| juniper netscreen screenos | = 2.6.1 | No fix listed |
| juniper netscreen screenos | = 2.6.1r1 | No fix listed |
| juniper netscreen screenos | = 2.6.1r2 | No fix listed |
| juniper netscreen screenos | = 2.6.1r3 | No fix listed |
| juniper netscreen screenos | = 2.6.1r4 | No fix listed |
Show 107 more
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | = 2.6.1r5 | No fix listed |
| juniper netscreen screenos | = 2.6.1r6 | No fix listed |
| juniper netscreen screenos | = 2.6.1r7 | No fix listed |
| juniper netscreen screenos | = 2.6.1r8 | No fix listed |
| juniper netscreen screenos | = 2.6.1r9 | No fix listed |
| juniper netscreen screenos | = 2.6.1r10 | No fix listed |
| juniper netscreen screenos | = 2.6.1r11 | No fix listed |
| juniper netscreen screenos | = 2.6.1r12 | No fix listed |
| juniper netscreen screenos | = 2.7.1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r1 | No fix listed |
| juniper netscreen screenos | = 2.7.1r2 | No fix listed |
| juniper netscreen screenos | = 2.7.1r3 | No fix listed |
| juniper netscreen screenos | = 2.8 | No fix listed |
| juniper netscreen screenos | = 2.8_r1 | No fix listed |
| juniper netscreen screenos | = 2.10_r3 | No fix listed |
| juniper netscreen screenos | = 2.10_r4 | No fix listed |
| juniper netscreen screenos | = 3.0.0 | No fix listed |
| juniper netscreen screenos | = 3.0.0r1 | No fix listed |
| juniper netscreen screenos | = 3.0.0r2 | No fix listed |
| juniper netscreen screenos | = 3.0.0r3 | No fix listed |
| juniper netscreen screenos | = 3.0.0r4 | No fix listed |
| juniper netscreen screenos | = 3.0.1 | No fix listed |
| juniper netscreen screenos | = 3.0.1r1 | No fix listed |
| juniper netscreen screenos | = 3.0.1r2 | No fix listed |
| juniper netscreen screenos | = 3.0.1r3 | No fix listed |
| juniper netscreen screenos | = 3.0.1r4 | No fix listed |
| juniper netscreen screenos | = 3.0.1r5 | No fix listed |
| juniper netscreen screenos | = 3.0.1r6 | No fix listed |
| juniper netscreen screenos | = 3.0.1r7 | No fix listed |
| juniper netscreen screenos | = 3.0.2 | No fix listed |
| juniper netscreen screenos | = 3.0.3 | No fix listed |
| juniper netscreen screenos | = 3.0.3_r1.1 | No fix listed |
| juniper netscreen screenos | = 3.0.3r1 | No fix listed |
| juniper netscreen screenos | = 3.0.3r2 | No fix listed |
| juniper netscreen screenos | = 3.0.3r3 | No fix listed |
| juniper netscreen screenos | = 3.0.3r4 | No fix listed |
| juniper netscreen screenos | = 3.0.3r5 | No fix listed |
| juniper netscreen screenos | = 3.0.3r6 | No fix listed |
| juniper netscreen screenos | = 3.0.3r7 | No fix listed |
| juniper netscreen screenos | = 3.0.3r8 | No fix listed |
| juniper netscreen screenos | = 3.1.0 | No fix listed |
| juniper netscreen screenos | = 3.1.0r1 | No fix listed |
| juniper netscreen screenos | = 3.1.0r2 | No fix listed |
| juniper netscreen screenos | = 3.1.0r3 | No fix listed |
| juniper netscreen screenos | = 3.1.0r4 | No fix listed |
| juniper netscreen screenos | = 3.1.0r5 | No fix listed |
| juniper netscreen screenos | = 3.1.0r6 | No fix listed |
| juniper netscreen screenos | = 3.1.0r7 | No fix listed |
| juniper netscreen screenos | = 3.1.0r8 | No fix listed |
| juniper netscreen screenos | = 3.1.0r9 | No fix listed |
| juniper netscreen screenos | = 3.1.0r10 | No fix listed |
| juniper netscreen screenos | = 3.1.0r11 | No fix listed |
| juniper netscreen screenos | = 3.1.0r12 | No fix listed |
| juniper netscreen screenos | = 3.1.1_r2 | No fix listed |
| juniper netscreen screenos | = 4.0.0 | No fix listed |
| juniper netscreen screenos | = 4.0.0r1 | No fix listed |
| juniper netscreen screenos | = 4.0.0r2 | No fix listed |
| juniper netscreen screenos | = 4.0.0r3 | No fix listed |
| juniper netscreen screenos | = 4.0.0r4 | No fix listed |
| juniper netscreen screenos | = 4.0.0r5 | No fix listed |
| juniper netscreen screenos | = 4.0.0r6 | No fix listed |
| juniper netscreen screenos | = 4.0.0r7 | No fix listed |
| juniper netscreen screenos | = 4.0.0r8 | No fix listed |
| juniper netscreen screenos | = 4.0.0r9 | No fix listed |
| juniper netscreen screenos | = 4.0.0r10 | No fix listed |
| juniper netscreen screenos | = 4.0.0r11 | No fix listed |
| juniper netscreen screenos | = 4.0.0r12 | No fix listed |
| juniper netscreen screenos | = 4.0.1 | No fix listed |
| juniper netscreen screenos | = 4.0.1r1 | No fix listed |
| juniper netscreen screenos | = 4.0.1r2 | No fix listed |
| juniper netscreen screenos | = 4.0.1r3 | No fix listed |
| juniper netscreen screenos | = 4.0.1r4 | No fix listed |
| juniper netscreen screenos | = 4.0.1r5 | No fix listed |
| juniper netscreen screenos | = 4.0.1r6 | No fix listed |
| juniper netscreen screenos | = 4.0.1r7 | No fix listed |
| juniper netscreen screenos | = 4.0.1r8 | No fix listed |
| juniper netscreen screenos | = 4.0.1r9 | No fix listed |
| juniper netscreen screenos | = 4.0.1r10 | No fix listed |
| juniper netscreen screenos | = 4.0.2 | No fix listed |
| juniper netscreen screenos | = 4.0.3 | No fix listed |
| juniper netscreen screenos | = 4.0.3r1 | No fix listed |
| juniper netscreen screenos | = 4.0.3r2 | No fix listed |
| juniper netscreen screenos | = 4.0.3r3 | No fix listed |
| juniper netscreen screenos | = 4.0.3r4 | No fix listed |
| juniper netscreen screenos | = 5.0.0 | No fix listed |
| juniper netscreen screenos | = 5.1.0 | No fix listed |
| juniper netscreen screenos | = 5.1.0r3a | No fix listed |
| juniper netscreen screenos | = 5.2.0 | No fix listed |
| netscreen ns-10 | All versions | No fix listed |
| netscreen ns-100 | = 3.0_.pe1.0 | No fix listed |
| netscreen ns-204 | = 5.0.0_r6.0 | No fix listed |
| netscreen ns-204 | = 0110.0_11_4.0_r10.0 | No fix listed |
| netscreen ns-204 | = 0110.0_11_5.1.0_r3a | No fix listed |
| netscreen ns-500 | = 4110.0_11_4.0_r10.0 | No fix listed |
| netscreen ns-500 | = 4110.0_11_5.1.0_r3a | No fix listed |
| netscreen ns-50ns25 | = 5.0.0_r6.0 | No fix listed |
| juniper netscreen-5gt | = 5.0 | No fix listed |
| juniper netscreen-idp | = 3.0 | No fix listed |
| juniper netscreen-idp | = 3.0r1 | No fix listed |
| juniper netscreen-idp | = 3.0r2 | No fix listed |
| juniper netscreen-idp 10 | = 3.0.1_r1 | No fix listed |
| juniper netscreen-idp 100 | = 3.0.1_r1 | No fix listed |
| juniper netscreen-idp 1000 | = 3.0.1_r1 | No fix listed |
| juniper netscreen-idp 500 | = 3.0.1_r1 | No fix listed |
| netscreen-sa 5000 series | All versions | No fix listed |
| netscreen-sa 5020 series | = 4.2_r2.2 | No fix listed |
| netscreen-sa 5050 series | = 4.2_r2.2 | No fix listed |
References
- 20050818 Juniper Netscreen VPN Username Enumeration Vulnerability mailing-list
- 16474 third-party-advisory vendor-advisory
- 1014728 vdb-entry
- www.nta-monitor.com exploit vendor-advisory
- 14595 exploit vdb-entry