CVE-2005-2640

No fix known EPSS 7%

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Published 2005-08-20 · CVE record · OSV

Products: neoteris instant_virtual_extranet, juniper netscreen_screenos, netscreen ns-10, netscreen ns-100, netscreen ns-204, netscreen ns-500, netscreen ns-50ns25