Details of VAR-200210-0192

ID

VAR-200210-0192

CVE

CVE-2002-0891

TITLE

NetScreen ScreenOS Remote restart vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200210-215

DESCRIPTION

The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name. This condition may be the result of an unchecked buffer, which may potentially allow the attacker to execute arbitrary code. This possibility has not been confirmed. Netscreen is a firewall security solution that enables wire-speed packet processing

Trust: 1.26

sources: NVD: CVE-2002-0891 // BID: 4842 // VULHUB: VHN-5281

AFFECTED PRODUCTS

vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.1r1	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.8_r1	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.0r2	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.0r4	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.0r3	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.5r6	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1r1	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.0r1	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	3.0.0	Trust: 1.6
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.5	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.7.1r2	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.10_r3	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1r5	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.7.1r3	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1r4	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.5r2	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1r2	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.7.1r1	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.5r1	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.6.1r3	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.7.1	Trust: 1.0
vendor:	juniper	model:	netscreen screenos	scope:	eq	version:	2.10_r4	Trust: 1.0
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	3.0.1	Trust: 0.3
vendor:	netscreen	model:	screenos r4	scope:	eq	version:	3.0	Trust: 0.3
vendor:	netscreen	model:	screenos r3	scope:	eq	version:	3.0	Trust: 0.3
vendor:	netscreen	model:	screenos r2	scope:	eq	version:	3.0	Trust: 0.3
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	3.0	Trust: 0.3
vendor:	netscreen	model:	screenos	scope:	eq	version:	3.0	Trust: 0.3
vendor:	netscreen	model:	screenos r4	scope:	eq	version:	2.10	Trust: 0.3
vendor:	netscreen	model:	screenos r3	scope:	eq	version:	2.10	Trust: 0.3
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	2.8	Trust: 0.3
vendor:	netscreen	model:	screenos r3	scope:	eq	version:	2.7.1	Trust: 0.3
vendor:	netscreen	model:	screenos r2	scope:	eq	version:	2.7.1	Trust: 0.3
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	2.7.1	Trust: 0.3
vendor:	netscreen	model:	screenos	scope:	eq	version:	2.7.1	Trust: 0.3
vendor:	netscreen	model:	screenos r5	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos r4	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos r3	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos r2	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos	scope:	eq	version:	2.6.1	Trust: 0.3
vendor:	netscreen	model:	screenos r6	scope:	eq	version:	2.5	Trust: 0.3
vendor:	netscreen	model:	screenos r2	scope:	eq	version:	2.5	Trust: 0.3
vendor:	netscreen	model:	screenos r1	scope:	eq	version:	2.5	Trust: 0.3
vendor:	netscreen	model:	screenos	scope:	eq	version:	2.5	Trust: 0.3
vendor:	netscreen	model:	screenos r2	scope:	ne	version:	3.0.1	Trust: 0.3

sources: BID: 4842 // CNNVD: CNNVD-200210-215 // NVD: CVE-2002-0891

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2002-0891
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200210-215
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-5281
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2002-0891
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-5281
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-5281 // CNNVD: CNNVD-200210-215 // NVD: CVE-2002-0891

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2002-0891

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200210-215

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200210-215

EXTERNAL IDS

db:	BID	id:	4842	Trust: 2.0
db:	NVD	id:	CVE-2002-0891	Trust: 1.7
db:	CNNVD	id:	CNNVD-200210-215	Trust: 0.7
db:	BUGTRAQ	id:	20020527 NETSCREEN 25 UNAUTHORISED REBOOT ISSUE	Trust: 0.6
db:	XF	id:	9186	Trust: 0.6
db:	VULHUB	id:	VHN-5281	Trust: 0.1

sources: VULHUB: VHN-5281 // BID: 4842 // CNNVD: CNNVD-200210-215 // NVD: CVE-2002-0891

REFERENCES

url:	http://www.securityfocus.com/bid/4842	Trust: 1.7
url:	http://online.securityfocus.com/archive/1/274240	Trust: 1.7
url:	http://www.netscreen.com/support/ns25_reboot.html	Trust: 1.7
url:	http://www.iss.net/security_center/static/9186.php	Trust: 1.7
url:	http://www.netscreen.com/index.html	Trust: 0.3

sources: VULHUB: VHN-5281 // BID: 4842 // CNNVD: CNNVD-200210-215 // NVD: CVE-2002-0891

CREDITS

quentyn@fotango.com

Trust: 0.6

sources: CNNVD: CNNVD-200210-215

SOURCES

db:	VULHUB	id:	VHN-5281
db:	BID	id:	4842
db:	CNNVD	id:	CNNVD-200210-215
db:	NVD	id:	CVE-2002-0891

LAST UPDATE DATE

2024-08-14T15:41:01.026000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-5281	date:	2008-09-05T00:00:00
db:	BID	id:	4842	date:	2002-05-27T00:00:00
db:	CNNVD	id:	CNNVD-200210-215	date:	2006-08-23T00:00:00
db:	NVD	id:	CVE-2002-0891	date:	2008-09-05T20:29:13.770

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-5281	date:	2002-10-04T00:00:00
db:	BID	id:	4842	date:	2002-05-27T00:00:00
db:	CNNVD	id:	CNNVD-200210-215	date:	2002-05-27T00:00:00
db:	NVD	id:	CVE-2002-0891	date:	2002-10-04T04:00:00