CVE-2005-2640

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows…

published August 20, 2005

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07093 · 94.2th percentile
Published
2005-08-20T04:00Z
EPSS history
Timeline
  • 20 AUG 04:00Z
    Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows…
    cvelistv5