CVE-2002-2266

NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...

CVE-2002-2234

NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests...

Netscreen Malicious URL feature can be bypassed by fragmenting the request

Netscreen Malicious URL feature can be bypassed by fragmenting the request http://www.cirt.net/advisories/netscreen.shtml Product Description: NetScreen Technologies Inc. is a leading developer of integrated network security solutions that offer the security, performance and total cost of ownersh...

NetScreen multiple bugs

Predictable TCP initial sequence numbers, DoS...

NetScreen Secure Command Shell (SCS) denial-of-service vulnerability

Overview The Secure Command Shell service on NetScreen firewall products contains a remotely exploitable denial-of-service vulnerability. Description Firewall products from NetScreen Technologies, Inc. include a Secure Shell version 1 SSHv1 implementation called Secure Command Shell SCS. The SCS...

Netscreen SSH1 CRC32 Compensation Denial of service

Discovered by: HD Moore Products Tested: Netscreen-25 All models expected to be vulnerable Vendor contacted: October 23rd Vendor confirmed: October 23rd CVE: CVE-2001-0144 covered this bug. Original Bug discovered by: Michal Zalewski of the BindView RAZOR Team. In February of 2001, BindView's RAZ...

CVE-2002-0891

The web interface WebUI of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service crash via a long user name...

CVE-2002-0234

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service resource exhaustion via a port scan to an external network, which consumes all available connections...

Netscreen DoS

Oversized username causes device to reboot...

Netscreen 25 unauthorised reboot issue

Please note that this advisory was prepared, before speaking to Netscreen's US operation. Nothing of this vulnerability has been discussed here or on vun-dev hence this email. Additionally it is not shown on netscreen's security alerts page http://www.netscreen.com/support/alert.html as of...

CVE-2002-0234

CVE-2002-0234 affects NetScreen ScreenOS prior to 2.6.1. The issue is a lack of a maximum concurrent-session limit, allowing a trusted-network attacker to perform a port scan to an external network that exhausts connections and causes denial of service. The provided documents describe the vulnera...

CVE-2002-0234

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service resource exhaustion via a port scan to an external network, which consumes all available connections...

CVE-2002-0234: Undefined Security Weakness

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service resource exhaustion via a port scan to an external network, which consumes all available connections...

CVE-2001-0589

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns...

CVE-2001-0007

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface...

CVE-2001-0589

Technical details such as affected products, versions, root cause, or available fixes for CVE-2001-0589 are not provided in the connected documents. The given sources only reiterate the vulnerability at a high level; monitor for updates.

CVE-2001-0007

CVE-2001-0007 refers to a buffer overflow in NetScreen Firewall WebUI (ScreenOS) that allows remote DoS via an oversized URL. Exploitation crashes the firewall without login; reboot needed. Affected: various ScreenOS releases; fixed in: ScreenOS 1.73r2 (NetScreen-1000), 2.01r7 (NetScreen-10/100),...

CVE-2001-0007: Undefined Security Weakness

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface...

CVE-2001-0589: Undefined Security Weakness

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns...

NetScreen ScreenOS 2.6 Subject to Trust Interface DoS

Problem: NetScreen ScreenOS 2.6.1 subject to Trust Interface DoS Attack Company Info: NetScreen Technologies are the manufacturers of some of the industry's highest quality VPN and firewall equipment. For more information please see http://www.netscreen.com. What's affected: The ScreenOS is the...