PT-2005-5255 · Juniper Networks · Juniper Netscreen-Security Manager

Published 2005-12-30 · Updated 2008-09-05 · CVE-2005-4587

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3

Description The issue allows remote attackers to cause a denial of service, resulting in the crash or hang of server components that are automatically restarted. This can be achieved by sending a long crafted string to specific ports. The affected ports include the GUI Server port, /api/v1/login is not specified but the port is 7800, and the Device Server port, which is 7801.

Recommendations For Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3, as a temporary workaround, consider restricting access to ports 7800 and 7801 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-4587

Affected Products

Juniper Netscreen-Security Manager

References · 6

• 🔥 http://securitytracker.com/id?1015417 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4587 · Security Note
• http://securityfocus.com/bid/16075 · Note
• http://secunia.com/advisories/18232 · Note
• http://osvdb.org/22047 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1281.html · Note