Netscreen ScreenOS DHCP Packet Buffer Padding Information Leakage Vulnerability

Bugtraq ID:	8762
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 03 2003 12:00AM
Updated:	Oct 03 2003 12:00AM
Credit:	This vulnerability was disclosed by the vendor.
Vulnerable:	NetScreen ScreenOS 4.0.3 r3 NetScreen ScreenOS 4.0.3 r2 NetScreen ScreenOS 4.0.3 r1 NetScreen ScreenOS 4.0.3 NetScreen ScreenOS 4.0.2 NetScreen ScreenOS 4.0.1 r9 NetScreen ScreenOS 4.0.1 r8 NetScreen ScreenOS 4.0.1 r7 NetScreen ScreenOS 4.0.1 r6 NetScreen ScreenOS 4.0.1 r5 NetScreen ScreenOS 4.0.1 r4 NetScreen ScreenOS 4.0.1 r3 NetScreen ScreenOS 4.0.1 r2 NetScreen ScreenOS 4.0.1 r1 NetScreen ScreenOS 4.0.1 NetScreen ScreenOS 4.0 r9 NetScreen ScreenOS 4.0 r8 NetScreen ScreenOS 4.0 r7 NetScreen ScreenOS 4.0 r6 NetScreen ScreenOS 4.0 r5 NetScreen ScreenOS 4.0 r4 NetScreen ScreenOS 4.0 r3 NetScreen ScreenOS 4.0 r2 NetScreen ScreenOS 4.0 r11 NetScreen ScreenOS 4.0 r10 NetScreen ScreenOS 4.0 r1 NetScreen ScreenOS 4.0 -DIAL NetScreen ScreenOS 4.0 NetScreen ScreenOS 3.1.1 r2 NetScreen ScreenOS 3.1 r9 NetScreen ScreenOS 3.1 r8 NetScreen ScreenOS 3.1 r7 NetScreen ScreenOS 3.1 r6 NetScreen ScreenOS 3.1 r5 NetScreen ScreenOS 3.1 r4 NetScreen ScreenOS 3.1 r3 NetScreen ScreenOS 3.1 r2 NetScreen ScreenOS 3.1 r11 NetScreen ScreenOS 3.1 r10 NetScreen ScreenOS 3.1 r1 NetScreen ScreenOS 3.1 NetScreen ScreenOS 3.0.3 r7 NetScreen ScreenOS 3.0.3 r6 NetScreen ScreenOS 3.0.3 r5 NetScreen ScreenOS 3.0.3 r4 NetScreen ScreenOS 3.0.3 r3 NetScreen ScreenOS 3.0.3 r2 NetScreen ScreenOS 3.0.3 r1.1 NetScreen ScreenOS 3.0.3 r1 NetScreen ScreenOS 3.0.3 NetScreen ScreenOS 3.0.2 NetScreen ScreenOS 3.0.1 r2 NetScreen ScreenOS 3.0.1 r1 NetScreen ScreenOS 3.0.1 NetScreen ScreenOS 3.0 r4 NetScreen ScreenOS 3.0 r3 NetScreen ScreenOS 3.0 r2 NetScreen ScreenOS 3.0 r1 NetScreen ScreenOS 3.0 NetScreen ScreenOS 2.6.1 r9 NetScreen ScreenOS 2.6.1 r8 NetScreen ScreenOS 2.6.1 r7 NetScreen ScreenOS 2.6.1 r6 NetScreen ScreenOS 2.6.1 r5 NetScreen ScreenOS 2.6.1 r4 NetScreen ScreenOS 2.6.1 r3 NetScreen ScreenOS 2.6.1 r2 NetScreen ScreenOS 2.6.1 r11 NetScreen ScreenOS 2.6.1 r10 NetScreen ScreenOS 2.6.1 r1 NetScreen ScreenOS 2.6.1 NetScreen ScreenOS 2.6
Not Vulnerable:	NetScreen ScreenOS 4.0.3 r4 NetScreen ScreenOS 4.0.1 r10 NetScreen ScreenOS 4.0 r12 NetScreen ScreenOS 3.1 r12 NetScreen ScreenOS 3.0.3 r8 NetScreen ScreenOS 2.6.1 r12

Netscreen ScreenOS DHCP Packet Buffer Padding Information Leakage Vulnerability

This issue can be exploited by transmitting DHCP requests to a target appliance and recording the data stored within the responses.

Netscreen ScreenOS DHCP Packet Buffer Padding Information Leakage Vulnerability

References:

• CSO Web Portal (NetScreen)
  
• NetScreen Advisory 57983 (NetScreen)