Vulnerabilities > CVE-2005-2640

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

neoteris

juniper

netscreen

exploit available

NVD

Published: 2005-08-23

Updated: 2016-10-18

Summary

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Vulnerable Configurations

Part	Description	Count
Application	Neoteris Neoteris Instant Virtual Extranet 3.0 Neoteris Instant Virtual Extranet 3.1 Neoteris Instant Virtual Extranet 3.2 Neoteris Instant Virtual Extranet 3.3 Neoteris Instant Virtual Extranet 3.3.1	5
OS	Juniper Juniper Netscreen Screenos 1.7 Juniper Netscreen Screenos 1.64 Juniper Netscreen Screenos 1.66 Juniper Netscreen Screenos 1.66_R2 Juniper Netscreen Screenos 1.73_R1 Juniper Netscreen Screenos 1.73_R2 Juniper Netscreen Screenos 2.0.1_R8 Juniper Netscreen Screenos 2.1 Juniper Netscreen Screenos 2.1_R6 Juniper Netscreen Screenos 2.1_R7 Juniper Netscreen Screenos 2.5 Juniper Netscreen Screenos 2.5R1 Juniper Netscreen Screenos 2.5R2 Juniper Netscreen Screenos 2.5R6 Juniper Netscreen Screenos 2.6.0 Juniper Netscreen Screenos 2.6.1 Juniper Netscreen Screenos 2.6.1R1 Juniper Netscreen Screenos 2.6.1R2 Juniper Netscreen Screenos 2.6.1R3 Juniper Netscreen Screenos 2.6.1R4 Juniper Netscreen Screenos 2.6.1R5 Juniper Netscreen Screenos 2.6.1R6 Juniper Netscreen Screenos 2.6.1R7 Juniper Netscreen Screenos 2.6.1R8 Juniper Netscreen Screenos 2.6.1R9 Juniper Netscreen Screenos 2.6.1R10 Juniper Netscreen Screenos 2.6.1R11 Juniper Netscreen Screenos 2.6.1R12 Juniper Netscreen Screenos 2.7.1 Juniper Netscreen Screenos 2.7.1R1 Juniper Netscreen Screenos 2.7.1R2 Juniper Netscreen Screenos 2.7.1R3 Juniper Netscreen Screenos 2.8 Juniper Netscreen Screenos 2.8_R1 Juniper Netscreen Screenos 2.10_R3 Juniper Netscreen Screenos 2.10_R4 Juniper Netscreen Screenos 3.0.0 Juniper Netscreen Screenos 3.0.0R1 Juniper Netscreen Screenos 3.0.0R2 Juniper Netscreen Screenos 3.0.0R3 Juniper Netscreen Screenos 3.0.0R4 Juniper Netscreen Screenos 3.0.1 Juniper Netscreen Screenos 3.0.1R1 Juniper Netscreen Screenos 3.0.1R2 Juniper Netscreen Screenos 3.0.1R3 Juniper Netscreen Screenos 3.0.1R4 Juniper Netscreen Screenos 3.0.1R5 Juniper Netscreen Screenos 3.0.1R6 Juniper Netscreen Screenos 3.0.1R7 Juniper Netscreen Screenos 3.0.2 Juniper Netscreen Screenos 3.0.3 Juniper Netscreen Screenos 3.0.3_R1.1 Juniper Netscreen Screenos 3.0.3R1 Juniper Netscreen Screenos 3.0.3R2 Juniper Netscreen Screenos 3.0.3R3 Juniper Netscreen Screenos 3.0.3R4 Juniper Netscreen Screenos 3.0.3R5 Juniper Netscreen Screenos 3.0.3R6 Juniper Netscreen Screenos 3.0.3R7 Juniper Netscreen Screenos 3.0.3R8 Juniper Netscreen Screenos 3.1.0 Juniper Netscreen Screenos 3.1.0R1 Juniper Netscreen Screenos 3.1.0R2 Juniper Netscreen Screenos 3.1.0R3 Juniper Netscreen Screenos 3.1.0R4 Juniper Netscreen Screenos 3.1.0R5 Juniper Netscreen Screenos 3.1.0R6 Juniper Netscreen Screenos 3.1.0R7 Juniper Netscreen Screenos 3.1.0R8 Juniper Netscreen Screenos 3.1.0R9 Juniper Netscreen Screenos 3.1.0R10 Juniper Netscreen Screenos 3.1.0R11 Juniper Netscreen Screenos 3.1.0R12 Juniper Netscreen Screenos 3.1.1_R2 Juniper Netscreen Screenos 4.0.0 Juniper Netscreen Screenos 4.0.0R1 Juniper Netscreen Screenos 4.0.0R2 Juniper Netscreen Screenos 4.0.0R3 Juniper Netscreen Screenos 4.0.0R4 Juniper Netscreen Screenos 4.0.0R5 Juniper Netscreen Screenos 4.0.0R6 Juniper Netscreen Screenos 4.0.0R7 Juniper Netscreen Screenos 4.0.0R8 Juniper Netscreen Screenos 4.0.0R9 Juniper Netscreen Screenos 4.0.0R10 Juniper Netscreen Screenos 4.0.0R11 Juniper Netscreen Screenos 4.0.0R12 Juniper Netscreen Screenos 4.0.1 Juniper Netscreen Screenos 4.0.1R1 Juniper Netscreen Screenos 4.0.1R2 Juniper Netscreen Screenos 4.0.1R3 Juniper Netscreen Screenos 4.0.1R4 Juniper Netscreen Screenos 4.0.1R5 Juniper Netscreen Screenos 4.0.1R6 Juniper Netscreen Screenos 4.0.1R7 Juniper Netscreen Screenos 4.0.1R8 Juniper Netscreen Screenos 4.0.1R9 Juniper Netscreen Screenos 4.0.1R10 Juniper Netscreen Screenos 4.0.2 Juniper Netscreen Screenos 4.0.3 Juniper Netscreen Screenos 4.0.3R1 Juniper Netscreen Screenos 4.0.3R2 Juniper Netscreen Screenos 4.0.3R3 Juniper Netscreen Screenos 4.0.3R4 Juniper Netscreen Screenos 5.0.0 Juniper Netscreen Screenos 5.1.0 Juniper Netscreen Screenos 5.1.0R3A Juniper Netscreen Screenos 5.2.0	109
OS	Netscreen Netscreen NS 10 * Netscreen NS 100 3.0_.Pe1.0 Netscreen NS 204 5.0.0_R6.0 Netscreen NS 204 0110.0_11_4.0_R10.0 Netscreen NS 204 0110.0_11_5.1.0_R3A Netscreen NS 500 4110.0_11_4.0_R10.0 Netscreen NS 500 4110.0_11_5.1.0_R3A Netscreen NS 50Ns25 5.0.0_R6.0	8
Hardware	Juniper Juniper Netscreen 5GT 5.0 Juniper Netscreen IDP 3.0 Juniper Netscreen IDP 3.0R1 Juniper Netscreen IDP 3.0R2 Juniper Netscreen IDP 10 3.0.1_R1 Juniper Netscreen IDP 100 3.0.1_R1 Juniper Netscreen IDP 1000 3.0.1_R1 Juniper Netscreen IDP 500 3.0.1_R1	8
Hardware	Netscreen Netscreen Netscreen SA 5000 Series * Netscreen Netscreen SA 5020 Series 4.2_R2.2 Netscreen Netscreen SA 5050 Series 4.2_R2.2	3

Exploit-Db

description	Juniper Netscreen 5.0 VPN Username Enumeration Vulnerability. CVE-2005-2640. Remote exploit for hardware platform
id	EDB-ID:26168
last seen	2016-02-03
modified	2005-08-18
published	2005-08-18
reporter	Roy Hills
source	https://www.exploit-db.com/download/26168/
title	Juniper Netscreen 5.0 VPN Username Enumeration Vulnerability

Vulnerabilities > CVE-2005-2640 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2005-2640"}]}

Summary

Vulnerable Configurations

Exploit-Db

References

Vulnerabilities > CVE-2005-2640