Vulnerabilities > CVE-2005-2640

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

neoteris

juniper

netscreen

exploit available

NVD

Published: 2005-08-23

Updated: 2024-11-21

Summary

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Vulnerable Configurations

Part	Description	Count
Application	Neoteris Neoteris Instant Virtual Extranet 3.0 Neoteris Instant Virtual Extranet 3.1 Neoteris Instant Virtual Extranet 3.3.1 Neoteris Instant Virtual Extranet 3.3 Neoteris Instant Virtual Extranet 3.2	5
OS	Juniper Juniper Netscreen Screenos 2.6.1R2 Juniper Netscreen Screenos 2.6.1R12 Juniper Netscreen Screenos 3.1.0R10 Juniper Netscreen Screenos 4.0.0R5 Juniper Netscreen Screenos 4.0.0 Juniper Netscreen Screenos 3.0.3R5 Juniper Netscreen Screenos 2.6.1R1 Juniper Netscreen Screenos 4.0.0R2 Juniper Netscreen Screenos 4.0.0R7 Juniper Netscreen Screenos 2.6.1R8 Juniper Netscreen Screenos 1.66 Juniper Netscreen Screenos 2.5 Juniper Netscreen Screenos 2.7.1 Juniper Netscreen Screenos 4.0.1R1 Juniper Netscreen Screenos 3.0.1R3 Juniper Netscreen Screenos 2.5R6 Juniper Netscreen Screenos 3.0.3R2 Juniper Netscreen Screenos 4.0.0R4 Juniper Netscreen Screenos 4.0.1R8 Juniper Netscreen Screenos 3.1.0R4 Juniper Netscreen Screenos 3.1.0R8 Juniper Netscreen Screenos 4.0.0R6 Juniper Netscreen Screenos 2.6.1R6 Juniper Netscreen Screenos 4.0.0R11 Juniper Netscreen Screenos 4.0.1R2 Juniper Netscreen Screenos 3.0.3R1 Juniper Netscreen Screenos 3.1.0R3 Juniper Netscreen Screenos 2.6.1R7 Juniper Netscreen Screenos 4.0.3R3 Juniper Netscreen Screenos 3.0.2 Juniper Netscreen Screenos 2.8_R1 Juniper Netscreen Screenos 4.0.2 Juniper Netscreen Screenos 4.0.0R1 Juniper Netscreen Screenos 1.64 Juniper Netscreen Screenos 3.1.0R12 Juniper Netscreen Screenos 2.6.1R11 Juniper Netscreen Screenos 2.8 Juniper Netscreen Screenos 2.10_R4 Juniper Netscreen Screenos 2.6.1 Juniper Netscreen Screenos 3.0.3 Juniper Netscreen Screenos 3.1.0R2 Juniper Netscreen Screenos 3.0.1R7 Juniper Netscreen Screenos 3.0.0R3 Juniper Netscreen Screenos 3.0.0R1 Juniper Netscreen Screenos 1.7 Juniper Netscreen Screenos 3.0.3_R1.1 Juniper Netscreen Screenos 3.1.1_R2 Juniper Netscreen Screenos 3.0.1R2 Juniper Netscreen Screenos 3.1.0R5 Juniper Netscreen Screenos 2.5R2 Juniper Netscreen Screenos 2.1 Juniper Netscreen Screenos 3.0.3R4 Juniper Netscreen Screenos 2.10_R3 Juniper Netscreen Screenos 4.0.0R9 Juniper Netscreen Screenos 4.0.3R2 Juniper Netscreen Screenos 2.7.1R3 Juniper Netscreen Screenos 3.1.0R7 Juniper Netscreen Screenos 4.0.3R4 Juniper Netscreen Screenos 3.1.0R9 Juniper Netscreen Screenos 3.0.1R5 Juniper Netscreen Screenos 4.0.1R7 Juniper Netscreen Screenos 3.0.3R6 Juniper Netscreen Screenos 3.0.0 Juniper Netscreen Screenos 5.2.0 Juniper Netscreen Screenos 4.0.1R5 Juniper Netscreen Screenos 1.66_R2 Juniper Netscreen Screenos 3.0.0R4 Juniper Netscreen Screenos 3.0.3R7 Juniper Netscreen Screenos 4.0.1R6 Juniper Netscreen Screenos 4.0.3 Juniper Netscreen Screenos 5.1.0R3A Juniper Netscreen Screenos 1.73_R2 Juniper Netscreen Screenos 2.6.1R5 Juniper Netscreen Screenos 3.1.0 Juniper Netscreen Screenos 4.0.1 Juniper Netscreen Screenos 4.0.3R1 Juniper Netscreen Screenos 4.0.1R3 Juniper Netscreen Screenos 2.5R1 Juniper Netscreen Screenos 3.1.0R11 Juniper Netscreen Screenos 2.1_R6 Juniper Netscreen Screenos 2.7.1R1 Juniper Netscreen Screenos 2.6.0 Juniper Netscreen Screenos 3.0.3R3 Juniper Netscreen Screenos 5.0.0 Juniper Netscreen Screenos 4.0.0R10 Juniper Netscreen Screenos 4.0.0R8 Juniper Netscreen Screenos 3.1.0R6 Juniper Netscreen Screenos 4.0.1R4 Juniper Netscreen Screenos 2.6.1R10 Juniper Netscreen Screenos 4.0.1R10 Juniper Netscreen Screenos 2.6.1R9 Juniper Netscreen Screenos 2.7.1R2 Juniper Netscreen Screenos 4.0.0R12 Juniper Netscreen Screenos 2.6.1R4 Juniper Netscreen Screenos 3.1.0R1 Juniper Netscreen Screenos 3.0.0R2 Juniper Netscreen Screenos 3.0.1R4 Juniper Netscreen Screenos 3.0.3R8 Juniper Netscreen Screenos 1.73_R1 Juniper Netscreen Screenos 3.0.1 Juniper Netscreen Screenos 4.0.0R3 Juniper Netscreen Screenos 2.1_R7 Juniper Netscreen Screenos 2.6.1R3 Juniper Netscreen Screenos 5.1.0 Juniper Netscreen Screenos 3.0.1R6 Juniper Netscreen Screenos 2.0.1_R8 Juniper Netscreen Screenos 4.0.1R9 Juniper Netscreen Screenos 3.0.1R1	109
OS	Netscreen Netscreen NS 50Ns25 5.0.0_R6.0 Netscreen NS 204 5.0.0_R6.0 Netscreen NS 204 0110.0_11_4.0_R10.0 Netscreen NS 204 0110.0_11_5.1.0_R3A Netscreen NS 500 4110.0_11_5.1.0_R3A Netscreen NS 500 4110.0_11_4.0_R10.0 Netscreen NS 100 3.0_.Pe1.0 Netscreen NS 10 *	8
Hardware	Juniper Juniper Netscreen IDP 3.0 Juniper Netscreen IDP 3.0R1 Juniper Netscreen IDP 3.0R2 Juniper Netscreen IDP 100 3.0.1_R1 Juniper Netscreen IDP 500 3.0.1_R1 Juniper Netscreen IDP 10 3.0.1_R1 Juniper Netscreen 5GT 5.0 Juniper Netscreen IDP 1000 3.0.1_R1	8
Hardware	Netscreen Netscreen Netscreen SA 5020 Series 4.2_R2.2 Netscreen Netscreen SA 5000 Series * Netscreen Netscreen SA 5050 Series 4.2_R2.2	3

Exploit-Db

description	Juniper Netscreen 5.0 VPN Username Enumeration Vulnerability. CVE-2005-2640. Remote exploit for hardware platform
id	EDB-ID:26168
last seen	2016-02-03
modified	2005-08-18
published	2005-08-18
reporter	Roy Hills
source	https://www.exploit-db.com/download/26168/
title	Juniper Netscreen 5.0 VPN Username Enumeration Vulnerability

Vulnerabilities > CVE-2005-2640 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2005-2640"}]}

Summary

Vulnerable Configurations

Exploit-Db

References

Vulnerabilities > CVE-2005-2640