Lucene search

MitreCVE-2005-2640

HistoryAug 23, 2005 - 4:00 a.m.

CVE-2005-2640

2005-08-2304:00:00

mitre

web.nvd.nist.gov

cve-2005-2640

information leak

juniper

netscreen

vpn

screenos

ike

aggressive mode

authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.031

Percentile

91.0%

JSON

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Affected configurations

Nvd

Node

neoterisinstant_virtual_extranetMatch3.0

neoterisinstant_virtual_extranetMatch3.1

neoterisinstant_virtual_extranetMatch3.2

neoterisinstant_virtual_extranetMatch3.3

neoterisinstant_virtual_extranetMatch3.3.1

Node

junipernetscreen_screenosMatch1.7

junipernetscreen_screenosMatch1.64

junipernetscreen_screenosMatch1.66

junipernetscreen_screenosMatch1.66_r2

junipernetscreen_screenosMatch1.73_r1

junipernetscreen_screenosMatch1.73_r2

junipernetscreen_screenosMatch2.0.1_r8

junipernetscreen_screenosMatch2.1

junipernetscreen_screenosMatch2.1_r6

junipernetscreen_screenosMatch2.1_r7

junipernetscreen_screenosMatch2.5

junipernetscreen_screenosMatch2.5r1

junipernetscreen_screenosMatch2.5r2

junipernetscreen_screenosMatch2.5r6

junipernetscreen_screenosMatch2.6.0

junipernetscreen_screenosMatch2.6.1

junipernetscreen_screenosMatch2.6.1r1

junipernetscreen_screenosMatch2.6.1r2

junipernetscreen_screenosMatch2.6.1r3

junipernetscreen_screenosMatch2.6.1r4

junipernetscreen_screenosMatch2.6.1r5

junipernetscreen_screenosMatch2.6.1r6

junipernetscreen_screenosMatch2.6.1r7

junipernetscreen_screenosMatch2.6.1r8

junipernetscreen_screenosMatch2.6.1r9

junipernetscreen_screenosMatch2.6.1r10

junipernetscreen_screenosMatch2.6.1r11

junipernetscreen_screenosMatch2.6.1r12

junipernetscreen_screenosMatch2.7.1

junipernetscreen_screenosMatch2.7.1r1

junipernetscreen_screenosMatch2.7.1r2

junipernetscreen_screenosMatch2.7.1r3

junipernetscreen_screenosMatch2.8

junipernetscreen_screenosMatch2.8_r1

junipernetscreen_screenosMatch2.10_r3

junipernetscreen_screenosMatch2.10_r4

junipernetscreen_screenosMatch3.0.0

junipernetscreen_screenosMatch3.0.0r1

junipernetscreen_screenosMatch3.0.0r2

junipernetscreen_screenosMatch3.0.0r3

junipernetscreen_screenosMatch3.0.0r4

junipernetscreen_screenosMatch3.0.1

junipernetscreen_screenosMatch3.0.1r1

junipernetscreen_screenosMatch3.0.1r2

junipernetscreen_screenosMatch3.0.1r3

junipernetscreen_screenosMatch3.0.1r4

junipernetscreen_screenosMatch3.0.1r5

junipernetscreen_screenosMatch3.0.1r6

junipernetscreen_screenosMatch3.0.1r7

junipernetscreen_screenosMatch3.0.2

junipernetscreen_screenosMatch3.0.3

junipernetscreen_screenosMatch3.0.3_r1.1

junipernetscreen_screenosMatch3.0.3r1

junipernetscreen_screenosMatch3.0.3r2

junipernetscreen_screenosMatch3.0.3r3

junipernetscreen_screenosMatch3.0.3r4

junipernetscreen_screenosMatch3.0.3r5

junipernetscreen_screenosMatch3.0.3r6

junipernetscreen_screenosMatch3.0.3r7

junipernetscreen_screenosMatch3.0.3r8

junipernetscreen_screenosMatch3.1.0

junipernetscreen_screenosMatch3.1.0r1

junipernetscreen_screenosMatch3.1.0r2

junipernetscreen_screenosMatch3.1.0r3

junipernetscreen_screenosMatch3.1.0r4

junipernetscreen_screenosMatch3.1.0r5

junipernetscreen_screenosMatch3.1.0r6

junipernetscreen_screenosMatch3.1.0r7

junipernetscreen_screenosMatch3.1.0r8

junipernetscreen_screenosMatch3.1.0r9

junipernetscreen_screenosMatch3.1.0r10

junipernetscreen_screenosMatch3.1.0r11

junipernetscreen_screenosMatch3.1.0r12

junipernetscreen_screenosMatch3.1.1_r2

junipernetscreen_screenosMatch4.0.0

junipernetscreen_screenosMatch4.0.0dial

junipernetscreen_screenosMatch4.0.0r1

junipernetscreen_screenosMatch4.0.0r2

junipernetscreen_screenosMatch4.0.0r3

junipernetscreen_screenosMatch4.0.0r4

junipernetscreen_screenosMatch4.0.0r5

junipernetscreen_screenosMatch4.0.0r6

junipernetscreen_screenosMatch4.0.0r7

junipernetscreen_screenosMatch4.0.0r8

junipernetscreen_screenosMatch4.0.0r9

junipernetscreen_screenosMatch4.0.0r10

junipernetscreen_screenosMatch4.0.0r11

junipernetscreen_screenosMatch4.0.0r12

junipernetscreen_screenosMatch4.0.1

junipernetscreen_screenosMatch4.0.1r1

junipernetscreen_screenosMatch4.0.1r2

junipernetscreen_screenosMatch4.0.1r3

junipernetscreen_screenosMatch4.0.1r4

junipernetscreen_screenosMatch4.0.1r5

junipernetscreen_screenosMatch4.0.1r6

junipernetscreen_screenosMatch4.0.1r7

junipernetscreen_screenosMatch4.0.1r8

junipernetscreen_screenosMatch4.0.1r9

junipernetscreen_screenosMatch4.0.1r10

junipernetscreen_screenosMatch4.0.2

junipernetscreen_screenosMatch4.0.3

junipernetscreen_screenosMatch4.0.3r1

junipernetscreen_screenosMatch4.0.3r2

junipernetscreen_screenosMatch4.0.3r3

junipernetscreen_screenosMatch4.0.3r4

junipernetscreen_screenosMatch5.0.0

junipernetscreen_screenosMatch5.1.0

junipernetscreen_screenosMatch5.1.0r3a

junipernetscreen_screenosMatch5.2.0

netscreenns-10

netscreenns-100Match3.0_.pe1.0

netscreenns-204Match5.0.0_r6.0

netscreenns-204Match0110.0_11_4.0_r10.0

netscreenns-204Match0110.0_11_5.1.0_r3a

netscreenns-500Match4110.0_11_4.0_r10.0

netscreenns-500Match4110.0_11_5.1.0_r3a

netscreenns-50ns25Match5.0.0_r6.0

Node

junipernetscreen-5gtMatch5.0

junipernetscreen-idpMatch3.0

junipernetscreen-idpMatch3.0r1

junipernetscreen-idpMatch3.0r2

junipernetscreen-idp_10Match3.0.1_r1

junipernetscreen-idp_100Match3.0.1_r1

junipernetscreen-idp_1000Match3.0.1_r1

junipernetscreen-idp_500Match3.0.1_r1

netscreennetscreen-sa_5000_series

netscreennetscreen-sa_5020_seriesMatch4.2_r2.2

netscreennetscreen-sa_5050_seriesMatch4.2_r2.2

VendorProductVersionCPE
neoterisinstant_virtual_extranet3.0cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*
neoterisinstant_virtual_extranet3.1cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*
neoterisinstant_virtual_extranet3.2cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*
neoterisinstant_virtual_extranet3.3cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*
neoterisinstant_virtual_extranet3.3.1cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*
junipernetscreen_screenos1.7cpe:2.3:o:juniper:netscreen_screenos:1.7:*:*:*:*:*:*:*
junipernetscreen_screenos1.64cpe:2.3:o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*
junipernetscreen_screenos1.66cpe:2.3:o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*
junipernetscreen_screenos1.66_r2cpe:2.3:o:juniper:netscreen_screenos:1.66_r2:*:*:*:*:*:*:*
junipernetscreen_screenos1.73_r1cpe:2.3:o:juniper:netscreen_screenos:1.73_r1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
neoteris	instant_virtual_extranet	3.0	cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:::::::*
neoteris	instant_virtual_extranet	3.1	cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:::::::*
neoteris	instant_virtual_extranet	3.2	cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:::::::*
neoteris	instant_virtual_extranet	3.3	cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:::::::*
neoteris	instant_virtual_extranet	3.3.1	cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:::::::*
juniper	netscreen_screenos	1.7	cpe:2.3:o:juniper:netscreen_screenos:1.7:::::::*
juniper	netscreen_screenos	1.64	cpe:2.3:o:juniper:netscreen_screenos:1.64:::::::*
juniper	netscreen_screenos	1.66	cpe:2.3:o:juniper:netscreen_screenos:1.66:::::::*
juniper	netscreen_screenos	1.66_r2	cpe:2.3:o:juniper:netscreen_screenos:1.66_r2:::::::*
juniper	netscreen_screenos	1.73_r1	cpe:2.3:o:juniper:netscreen_screenos:1.73_r1:::::::*

Rows per page:

1-10 of 1331

References

marc.info/?l=bugtraq&m=112438068426034&w=2

secunia.com/advisories/16474/

securitytracker.com/id?1014728

www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm

www.securityfocus.com/bid/14595

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.031

Percentile

91.0%

JSON

Related for CVE-2005-2640