NVD

Id
68329  
Name
CVE-2005-2640  
Description
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2005-08-23  
Modified Date
2016-10-17  
Seq
2005-2640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
353101 68329 CVE-2005-2640 20050818 Juniper Netscreen VPN Username Enumeration Vulnerability  View
353102 68329 CVE-2005-2640 1014728  View
353103 68329 CVE-2005-2640 http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm  View
353104 68329 CVE-2005-2640 14595  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62296 JVNDB-2005-000498 NetScreen ScreenOS の IKE アグレッシブモードにおける情報漏洩の脆弱性 NetScreen ScreenOS の IKE プロトコルの実装では、IKE アグレッシブモードメッセージに含まれるユーザ名 (IKE ID) が有効な VPN ユーザであるかどうかによって応答が異なる脆弱性が存在します。 CVE-2005-2640 13844 CVE-2005-2640 68329 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000498.html 2005-08-18 2007-04-01 View