CVE-2002-2150

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.iss.net/security_center/static/10449.php
http://www.kb.cert.org/vuls/id/539363	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/6023
http://www.iss.net/security_center/static/10449.php
http://www.kb.cert.org/vuls/id/539363	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/6023

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:juniper:netscreen_screenos:2.7.1:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:::::::*
	cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:::::::*

History

20 Nov 2024, 23:42

Type	Values Removed	Values Added
References	~~() http://www.iss.net/security_center/static/10449.php -~~	() http://www.iss.net/security_center/static/10449.php -
References	~~() http://www.kb.cert.org/vuls/id/539363 - Third Party Advisory, US Government Resource~~	() http://www.kb.cert.org/vuls/id/539363 - Third Party Advisory, US Government Resource
References	~~() http://www.securityfocus.com/bid/6023 -~~	() http://www.securityfocus.com/bid/6023 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:42

NVD link : CVE-2002-2150

Mitre link : CVE-2002-2150

CVE.ORG link : CVE-2002-2150

JSON object : View

Products Affected

juniper

netscreen_screenos

CWE

NVD-CWE-Other

{"id": "CVE-2002-2150", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-12-31T05:00:00.000", "references": [{"url": "http://www.iss.net/security_center/static/10449.php", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/539363", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/6023", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10449.php", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/539363", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/6023", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections."}], "lastModified": "2024-11-20T23:42:59.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CE7F646-B716-47D7-84E8-CA875A85C983"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1648D07-823B-4BF9-87EC-DB34797B5B5C"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "057B0387-44C0-45BE-9D91-D5A01C9D8020"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AA52D22-A0D6-413A-9F49-0452356D2BE8"}, {"criteria": "cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05578911-51E3-447B-98B6-083D3F35E8F1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}