CVE-2005-4587

Summary: CVE-2005-4587 affects Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3. An attacker can remotely cause a denial of service by sending long crafted strings to the GUI Server port (7800) or the Device Server port (7801). The issue triggers a crash or hang of server components that...

CVE-2005-4587: Undefined Security Weakness

Juniper NetScreen-Security Manager NSM 2004 FP2 and FP3 allow remote attackers to cause a denial of service crash or hang of server components that are automatically restarted via a long crafted string on 1 port 7800 the GUI Server port or 2 port 7801 the Device Server port...

Juniper NetScreen-Security Manager DoS

Malformed data to TCP/7800 or TCP/7801 port causes service to crash...

Web Server / Application favicon.ico Vendor Fingerprinting

The 'favicon.ico' file found on the remote web server belongs to a popular web server. This may be used to fingerprint the web server. This script was written by Javier Fernandez-Sanguino based on sample code written by Renaud Deraison in the nessus-plugins mailing list It is distributed under th...

CVE-2005-2640

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...

CVE-2005-2640

The CVE describes a behavioral discrepancy information leak in Juniper Netscreen VPNs running ScreenOS 5.2.0 and earlier. When using IKE with pre-shared key authentication, remote attackers can enumerate valid usernames by sending an IKE Aggressive Mode packet: a response is generated for valid u...

CVE-2005-2640

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...

CVE-2005-2640: Undefined Security Weakness

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...

Juniper NetScreen 5.0 - VPN Username Enumeration

Juniper NetScreen 5.0 - VPN Username Enumeration source: https://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN...

Juniper NetScreen 5.0 - VPN 'Username' Enumeration

source: https://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN users. With a valid username, an attacker can...

[Full-disclosure] Juniper Netscreen VPN Username Enumeration Vulnerability

Juniper Netscreen VPN Username Enumeration Vulnerability 1. Overview NTA Monitor has discovered a VPN username enumeration vulnerability in the Juniper Netscreen integrated Firewall/VPN products while performing a VPN security test for a customer. The vulnerability affects remote access VPNs know...

Juniper Netscreen VPN user enumeration

Different reply for existing user in IKE...

Netscreen VPN Detection

Binary data 2950.prm...

CVE-2004-1766

The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing...

CVE-2004-1766

The CVE refers to NetScreen-Security Manager prior to Feature Pack 1 communicating with devices using ScreenOS 5.0 without encryption, allowing remote attackers to obtain sensitive information via sniffing. The available documents state the vulnerability and its impact (information disclosure) bu...

CVE-2004-1766: Undefined Security Weakness

The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing...

CVE-2004-1446

Technical details (affected product/version, root cause, exploitability, and fix) are not publicly provided in the connected documents; monitor for updates.

CVE-2004-1446: Undefined Security Weakness

Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service device reboot or hang via a crafted SSH v1 packet...

CVE-2004-1446

Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service device reboot or hang via a crafted SSH v1 packet...

CVE-2004-0347

Cross-site scripting XSS vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 build 4797 allows remote authenticated users to execute arbitrary script as other users via the row parameter...