CVE-2005-2640
Medium
Description
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Juniper Netscreen Screenos
PublishedAug 23, 2005
First seenAug 23, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen_screenos | 1.7, 1.64, 1.66, 1.66_r2, 1.73_r1, 1.73_r2, 2.0.1_r8, 2.1, 2.1_r6, 2.1_r7, 2.5, 2.5r1, 2.5r2, 2.5r6, 2.6.0, 2.6.1, 2.6.1r1, 2.6.1r2, 2.6.1r3, 2.6.1r4, 2.6.1r5, 2.6.1r6, 2.6.1r7, 2.6.1r8, 2.6.1r9, 2.6.1r10, 2.6.1r11, 2.6.1r12, 2.7.1, 2.7.1r1, 2.7.1r2, 2.7.1r3, 2.8, 2.8_r1, 2.10_r3, 2.10_r4, 3.0.0, 3.0.0r1, 3.0.0r2, 3.0.0r3, 3.0.0r4, 3.0.1, 3.0.1r1, 3.0.1r2, 3.0.1r3, 3.0.1r4, 3.0.1r5, 3.0.1r6, 3.0.1r7, 3.0.2, 3.0.3, 3.0.3_r1.1, 3.0.3r1, 3.0.3r2, 3.0.3r3, 3.0.3r4, 3.0.3r5, 3.0.3r6, 3.0.3r7, 3.0.3r8, 3.1.0, 3.1.0r1, 3.1.0r2, 3.1.0r3, 3.1.0r4, 3.1.0r5, 3.1.0r6, 3.1.0r7, 3.1.0r8, 3.1.0r9, 3.1.0r10, 3.1.0r11, 3.1.0r12, 3.1.1_r2, 4.0.0, 4.0.0r1, 4.0.0r2, 4.0.0r3, 4.0.0r4, 4.0.0r5, 4.0.0r6, 4.0.0r7, 4.0.0r8, 4.0.0r9, 4.0.0r10, 4.0.0r11, 4.0.0r12, 4.0.1, 4.0.1r1, 4.0.1r2, 4.0.1r3, 4.0.1r4, 4.0.1r5, 4.0.1r6, 4.0.1r7, 4.0.1r8, 4.0.1r9, 4.0.1r10, 4.0.2, 4.0.3, 4.0.3r1, 4.0.3r2, 4.0.3r3, 4.0.3r4, 5.0.0, 5.1.0, 5.1.0r3a, 5.2.0 | — |
| neoteris instant_virtual_extranet | 3.0, 3.1, 3.2, 3.3, 3.3.1 | — |
| netscreen ns-10 | No range specified | — |
| netscreen ns-100 | 3.0_.pe1.0 | — |
| netscreen ns-204 | 5.0.0_r6.0, 0110.0_11_4.0_r10.0, 0110.0_11_5.1.0_r3a | — |
| netscreen ns-500 | 4110.0_11_4.0_r10.0, 4110.0_11_5.1.0_r3a | — |
| netscreen ns-50ns25 | 5.0.0_r6.0 | — |
| juniper netscreen-5gt | 5.0 | — |
| juniper netscreen-idp | 3.0, 3.0r1, 3.0r2 | — |
| juniper netscreen-idp_10 | 3.0.1_r1 | — |
| juniper netscreen-idp_100 | 3.0.1_r1 | — |
| juniper netscreen-idp_1000 | 3.0.1_r1 | — |
| juniper netscreen-idp_500 | 3.0.1_r1 | — |
| netscreen netscreen-sa_5000_series | No range specified | — |
| netscreen netscreen-sa_5020_series | 4.2_r2.2 | — |
| netscreen netscreen-sa_5050_series | 4.2_r2.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.