Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
BID:10854
Info
Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
| Bugtraq ID: | 10854 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2004 12:00AM |
| Updated: | Aug 04 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Mark Ellzey Thomas of NaviSite. |
| Vulnerable: |
NetScreen ScreenOS 5.0 NetScreen ScreenOS 4.0.3 r4 NetScreen ScreenOS 4.0.3 r3 NetScreen ScreenOS 4.0.3 r2 NetScreen ScreenOS 4.0.3 r1 NetScreen ScreenOS 4.0.3 NetScreen ScreenOS 4.0.2 NetScreen ScreenOS 4.0.1 r9 NetScreen ScreenOS 4.0.1 r8 NetScreen ScreenOS 4.0.1 r7 NetScreen ScreenOS 4.0.1 r6 NetScreen ScreenOS 4.0.1 r5 NetScreen ScreenOS 4.0.1 r4 NetScreen ScreenOS 4.0.1 r3 NetScreen ScreenOS 4.0.1 r2 NetScreen ScreenOS 4.0.1 r10 NetScreen ScreenOS 4.0.1 r1 NetScreen ScreenOS 4.0.1 NetScreen ScreenOS 4.0 r9 NetScreen ScreenOS 4.0 r8 NetScreen ScreenOS 4.0 r7 NetScreen ScreenOS 4.0 r6 NetScreen ScreenOS 4.0 r5 NetScreen ScreenOS 4.0 r4 NetScreen ScreenOS 4.0 r3 NetScreen ScreenOS 4.0 r2 NetScreen ScreenOS 4.0 r12 NetScreen ScreenOS 4.0 r11 NetScreen ScreenOS 4.0 r10 NetScreen ScreenOS 4.0 r1 NetScreen ScreenOS 4.0 -DIAL NetScreen ScreenOS 4.0 NetScreen ScreenOS 3.1.1 r2 NetScreen ScreenOS 3.1 r9 NetScreen ScreenOS 3.1 r8 NetScreen ScreenOS 3.1 r7 NetScreen ScreenOS 3.1 r6 NetScreen ScreenOS 3.1 r5 NetScreen ScreenOS 3.1 r4 NetScreen ScreenOS 3.1 r3 NetScreen ScreenOS 3.1 r2 NetScreen ScreenOS 3.1 r12 NetScreen ScreenOS 3.1 r11 NetScreen ScreenOS 3.1 r10 NetScreen ScreenOS 3.1 r1 NetScreen ScreenOS 3.1 NetScreen ScreenOS 3.0.3 r8 NetScreen ScreenOS 3.0.3 r7 NetScreen ScreenOS 3.0.3 r6 NetScreen ScreenOS 3.0.3 r5 NetScreen ScreenOS 3.0.3 r4 NetScreen ScreenOS 3.0.3 r3 NetScreen ScreenOS 3.0.3 r2 NetScreen ScreenOS 3.0.3 r1.1 NetScreen ScreenOS 3.0.3 r1 NetScreen ScreenOS 3.0.3 NetScreen ScreenOS 3.0.2 NetScreen ScreenOS 3.0.1 r7 NetScreen ScreenOS 3.0.1 r6 NetScreen ScreenOS 3.0.1 r5 NetScreen ScreenOS 3.0.1 r4 NetScreen ScreenOS 3.0.1 r3 NetScreen ScreenOS 3.0.1 r2 NetScreen ScreenOS 3.0.1 r1 NetScreen ScreenOS 3.0.1 NetScreen ScreenOS 3.0 r4 NetScreen ScreenOS 3.0 r3 NetScreen ScreenOS 3.0 r2 NetScreen ScreenOS 3.0 r1 NetScreen ScreenOS 3.0 NetScreen ScreenOS 2.10 r4 NetScreen ScreenOS 2.10 r3 NetScreen ScreenOS 2.8 r1 NetScreen ScreenOS 2.8 NetScreen ScreenOS 2.7.1 r3 NetScreen ScreenOS 2.7.1 r2 NetScreen ScreenOS 2.7.1 r1 NetScreen ScreenOS 2.7.1 NetScreen ScreenOS 2.6.1 r9 NetScreen ScreenOS 2.6.1 r8 NetScreen ScreenOS 2.6.1 r7 NetScreen ScreenOS 2.6.1 r6 NetScreen ScreenOS 2.6.1 r5 NetScreen ScreenOS 2.6.1 r4 NetScreen ScreenOS 2.6.1 r3 NetScreen ScreenOS 2.6.1 r2 NetScreen ScreenOS 2.6.1 r12 NetScreen ScreenOS 2.6.1 r11 NetScreen ScreenOS 2.6.1 r10 NetScreen ScreenOS 2.6.1 r1 NetScreen ScreenOS 2.6.1 NetScreen ScreenOS 2.6 NetScreen ScreenOS 2.5 r6 NetScreen ScreenOS 2.5 r2 NetScreen ScreenOS 2.5 r1 NetScreen ScreenOS 2.5 NetScreen ScreenOS 2.1 r7 NetScreen ScreenOS 2.1 r6 NetScreen ScreenOS 2.1 NetScreen ScreenOS 2.0.1 r8 NetScreen ScreenOS 1.73 r2 NetScreen ScreenOS 1.73 r1 NetScreen ScreenOS 1.66 r2 NetScreen ScreenOS 1.66 NetScreen ScreenOS 1.64 NetScreen ScreenOS 1.7 |
| Not Vulnerable: |
NetScreen NS-10 |
Discussion
Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
Juniper Networks NetScreen firewalls configured to run the SSHv1 service are reported prone to a denial of service vulnerability. It is reported that the vulnerability may be triggered by a remote attacker, prior to any form of authentication.
Juniper Networks NetScreen firewalls configured to run the SSHv1 service are reported prone to a denial of service vulnerability. It is reported that the vulnerability may be triggered by a remote attacker, prior to any form of authentication.
Exploit / POC
Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
Solution:
The vendor has recommended that customers upgrade NetScreen firewall to one of the following versions of ScreenOS:
5.0.0r8 (except ISG2000)
5.0.0r8 (ISG2000, available Aug 25, 2004)
5.0.0r8.1
4.0.0r13
4.0.3r8
4.0.1-Dial2r8
4.0.1-SBRr7
4.0.1-MCASTr3
3.0.3r9
3.0.1r8 (NS10, available Aug 31, 2004)
Customers are advised to contact the vendor for further details, regarding obtaining and applying appropriate updates.
The vendor has released an updated advisory to address this issue.
Solution:
The vendor has recommended that customers upgrade NetScreen firewall to one of the following versions of ScreenOS:
5.0.0r8 (except ISG2000)
5.0.0r8 (ISG2000, available Aug 25, 2004)
5.0.0r8.1
4.0.0r13
4.0.3r8
4.0.1-Dial2r8
4.0.1-SBRr7
4.0.1-MCASTr3
3.0.3r9
3.0.1r8 (NS10, available Aug 31, 2004)
Customers are advised to contact the vendor for further details, regarding obtaining and applying appropriate updates.
The vendor has released an updated advisory to address this issue.
References
Juniper Networks NetScreen SSHv1 Denial Of Service Vulnerability
References:
References:
- NetScreen Advisory 59110 - Remote crash of ScreenOS via the SSHv1 service (Juniper Networks)