Vulnerabilities

TI-2002-02178 CVE-2002-2266 · GHSA-v7x8-gqgc-pmm6

NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows…

LOW 26

NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01382 Published 2007-10-18 No fix listed

TI-2002-02146 CVE-2002-2234 · GHSA-h964-f22q-97h6

NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL…

LOW 23

NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.015 Published 2007-10-14 No fix listed CWE-16

TI-2005-02504 CVE-2005-2640 · GHSA-8h6v-vg4c-567j

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0…

LOW 33

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07093 Published 2005-08-20 No fix listed

TI-2004-00316 CVE-2004-0347 · GHSA-h4hw-89ff-xxj6

Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series…

LOW 31

Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row p…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02069 Published 2004-09-01 No fix listed

TI-2001-00007 CVE-2001-0007 · GHSA-qm34-w9p4-fxqv

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of…