PT-2003-1280 · Netscreen · Netscreen Screenos

Published 2003-03-31 · Updated 2008-09-05 · CVE-2002-1547

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscreen ScreenOS versions 4.0.0r6 and earlier

Description The issue allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface. This can be achieved through certain CRC32 exploits.

Recommendations For Netscreen ScreenOS versions 4.0.0r6 and earlier, consider restricting access to the SCS management interface as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-1547

Affected Products

Netscreen Screenos

References · 9

• http://iss.net/security_center/static/10528.php · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0443.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1547 · Security Note
• http://netscreen.com/support/alerts/11_06_02.html · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0053.html · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0054.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0446.html · Note
• http://osvdb.org/4376 · Note
• http://kb.cert.org/vuls/id/930161 · Note