The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
References
Link | Resource |
---|---|
http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp | |
http://www.kb.cert.org/vuls/id/CRDY-5VEU8N | Third Party Advisory US Government Resource |
http://www.kb.cert.org/vuls/id/927630 | Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/9455 | Vendor Advisory |
http://secunia.com/advisories/10675 | Vendor Advisory |
http://www.juniper.net/support/security/alerts/58290.txt | |
http://www.osvdb.org/3613 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/14886 |
Configurations
Information
Published : 2004-01-19 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-1766
Mitre link : CVE-2004-1766
JSON object : View
CWE
Products Affected
juniper
- netscreen-security_manager_2004