PT-2004-2670 · Juniper Networks · Netscreen-Security Manager+1

Publicado 2004-01-20 · Atualizado 2017-07-11 · CVE-2004-1766

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetScreen-Security Manager versions prior to Feature Pack 1

Description The issue concerns the default installation of NetScreen-Security Manager, where encryption for communication with devices running ScreenOS 5.0 is not enabled. This allows remote attackers to obtain sensitive information via sniffing.

Recommendations For versions prior to Feature Pack 1, enable encryption for communication with devices running ScreenOS 5.0 to prevent sensitive information from being obtained via sniffing.

Correção

Identificadores relacionados

CVE-2004-1766

Produtos afetados

Netscreen-Security Manager

Screenos

Referências · 9

• http://securityfocus.com/bid/9455 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14886 · Nota
• http://secunia.com/advisories/10675 · Aviso do Fabricante
• http://osvdb.org/3613 · Nota
• http://kb.cert.org/vuls/id/927630 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1766 · Nota de Segurança
• http://juniper.net/support/security/alerts/58290.txt · Nota
• http://kb.cert.org/vuls/id/CRDY-5VEU8N · Nota
• http://netscreen.com/services/security/alerts/1_19_04_58290.jsp · Nota