Lucene search

[email protected]CVE-2002-2234

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2234

2022-10-0316:23:49

CWE-16

[email protected]

web.nvd.nist.gov

cve-2002-2234

netscreen

screenos

remote attackers

bypass

malicious-url blocking

fragmented ip requests

nvd

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON

NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.

Affected configurations

NVD

Node

netscreenscreenosMatch2.7.1

netscreenscreenosMatch2.8

netscreenscreenosMatch3.0

netscreenscreenosMatch3.1

netscreenscreenosMatch4.0

CPENameOperatorVersion
netscreen:screenosnetscreen screenoseq2.7.1
netscreen:screenosnetscreen screenoseq2.8
netscreen:screenosnetscreen screenoseq3.0
netscreen:screenosnetscreen screenoseq3.1
netscreen:screenosnetscreen screenoseq4.0

CPE	Name	Operator	Version
netscreen:screenos	netscreen screenos	eq	2.7.1
netscreen:screenos	netscreen screenos	eq	2.8
netscreen:screenos	netscreen screenos	eq	3.0
netscreen:screenos	netscreen screenos	eq	3.1
netscreen:screenos	netscreen screenos	eq	4.0

References

archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html

archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html

www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html

www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0347.html

www.iss.net/security_center/static/10699.php

www.securityfocus.com/bid/6245

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON

Related for CVE-2002-2234

cvelist1 nvd1