NVD

Id
80576  
Name
CVE-2002-1623  
Description
The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2002-12-31  
Modified Date
2017-07-10  
Seq
2002-1623  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
401663 80576 CVE-2002-1623 20020903 Check Point statement on use of IKE Aggressive Mode  View
401664 80576 CVE-2002-1623 20020905 RE: SecuRemote usernames can be guessed or sniffed using IKE exchange  View
401665 80576 CVE-2002-1623 20020911 RE: SecuRemote usernames can be guessed or sniffed using IKE  View
401666 80576 CVE-2002-1623 http://www.checkpoint.com/techsupport/alerts/ike.html  View
401667 80576 CVE-2002-1623 VU#886601  View
401668 80576 CVE-2002-1623 http://www.nta-monitor.com/news/checkpoint.htm  View
401669 80576 CVE-2002-1623 http://www.securiteam.com/securitynews/5TP040U8AW.html  View
401670 80576 CVE-2002-1623 20020903 SecuRemote usernames can be guessed or sniffed using IKE exchange  View
401671 80576 CVE-2002-1623 5607  View
401672 80576 CVE-2002-1623 fw1-ike-username-enumeration(10034)  View

Related JVN