PT-2003-1280 · Netscreen · Netscreen Screenos

Publicado 2003-03-31 · Atualizado 2008-09-05 · CVE-2002-1547

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscreen ScreenOS versions 4.0.0r6 and earlier

Description The issue allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface. This can be achieved through certain CRC32 exploits.

Recommendations For Netscreen ScreenOS versions 4.0.0r6 and earlier, consider restricting access to the SCS management interface as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1547

Produtos afetados

Netscreen Screenos

Referências · 9

• http://iss.net/security_center/static/10528.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0053.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0443.html · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0054.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1547 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0446.html · Nota
• http://netscreen.com/support/alerts/11_06_02.html · Aviso do Fabricante
• http://osvdb.org/4376 · Nota
• http://kb.cert.org/vuls/id/930161 · Nota