Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability

Bugtraq ID:	16075
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 28 2005 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Discovered by David Maciejak <[email protected]>.
Vulnerable:	Juniper NetScreen-Security Manager (NSM) 2004 FP3 Juniper NetScreen-Security Manager (NSM) 2004 FP2
Not Vulnerable:	Juniper NetScreen-Security Manager (NSM) 2005.1

Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability

Juniper NSM is prone to a remote denial of service vulnerability.

A remote attacker may trigger a crash or hang in the server and deny service to legitimate users. It should be noted that the application ships with a watchdog service that periodically restarts the services.

NSM 2004 FP2 and FP3 are reportedly vulnerable.

Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability

Solution:
NSM 2005.1 is not vulnerable to this issue. Please contact the vendor to obtain a fix.

Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability

References:

• NetScreen-Security Manager (NSM) (Juniper Networks)
  
• Specifically crafted packets can cause NSM Denial of Service (Juniper Networks)