PT-2004-2670 · Juniper Networks · Netscreen-Security Manager+1

Published 2004-01-20 · Updated 2017-07-11 · CVE-2004-1766

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetScreen-Security Manager versions prior to Feature Pack 1

Description The issue concerns the default installation of NetScreen-Security Manager, where encryption for communication with devices running ScreenOS 5.0 is not enabled. This allows remote attackers to obtain sensitive information via sniffing.

Recommendations For versions prior to Feature Pack 1, enable encryption for communication with devices running ScreenOS 5.0 to prevent sensitive information from being obtained via sniffing.

Fix

Related Identifiers

CVE-2004-1766

Affected Products

Netscreen-Security Manager

Screenos

References · 9

• http://securityfocus.com/bid/9455 · Vendor Advisory
• http://secunia.com/advisories/10675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1766 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14886 · Note
• http://osvdb.org/3613 · Note
• http://kb.cert.org/vuls/id/927630 · Note
• http://juniper.net/support/security/alerts/58290.txt · Note
• http://kb.cert.org/vuls/id/CRDY-5VEU8N · Note
• http://netscreen.com/services/security/alerts/1_19_04_58290.jsp · Note