NetScreen Security Manager Insecure Default Remote Communication Vulnerability
BID:9455
Info
NetScreen Security Manager Insecure Default Remote Communication Vulnerability
| Bugtraq ID: | 9455 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2004 12:00AM |
| Updated: | Jan 20 2004 12:00AM |
| Credit: | Vulnerability disclosed by NetScreen. |
| Vulnerable: |
NetScreen NetScreen-Security Manager 2004 |
| Not Vulnerable: |
NetScreen NetScreen-Security Manager 2004 Feature Pack 1 |
Discussion
NetScreen Security Manager Insecure Default Remote Communication Vulnerability
A problem in the handling of default communications has been identified in NetScreen-Security Manager. Because of this, an attacker may be able to gain access to potentially sensitive information.
A problem in the handling of default communications has been identified in NetScreen-Security Manager. Because of this, an attacker may be able to gain access to potentially sensitive information.
Exploit / POC
NetScreen Security Manager Insecure Default Remote Communication Vulnerability
No exploit is required for this issue.
No exploit is required for this issue.
Solution / Fix
NetScreen Security Manager Insecure Default Remote Communication Vulnerability
Solution:
NetScreen has released NetScreen-Security Manager 2004 Feature Pack 1 to address this issue. With a valid service contract, updated software can be downloaded from the following location:
http://www.netscreen.com/cso
Solution:
NetScreen has released NetScreen-Security Manager 2004 Feature Pack 1 to address this issue. With a valid service contract, updated software can be downloaded from the following location:
http://www.netscreen.com/cso
References
NetScreen Security Manager Insecure Default Remote Communication Vulnerability
References:
References:
- NetScreen Security Advisory 58290 (NetScreen)