CVE-2002-0891 : The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.

The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.

Published 2002-10-04 04:00:00

Updated 2008-09-05 20:29:14

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2002-0891

Juniper » Netscreen Screenos » Version: 2.5
cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.5r1
cpe:2.3:o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.5r6
cpe:2.3:o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.7.1
cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.7.1r2
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.0r4
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1r1
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1r2
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1r3
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1r4
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1r5
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.10 R3
cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.10 R4
cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.8 R1
cpe:2.3:o:juniper:netscreen_screenos:2.8_r1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.0
cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.0r1
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.0r2
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.5r2
cpe:2.3:o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.6.1
cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.7.1r1
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 2.7.1r3
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.0r3
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*
Matching versions
Juniper » Netscreen Screenos » Version: 3.0.1r1
cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2002-0891

EPSS FAQ

1.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 83 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-0891

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2002-0891

http://online.securityfocus.com/archive/1/274240
http://www.securityfocus.com/bid/4842

Vendor Advisory
http://www.iss.net/security_center/static/9186.php

Vendor Advisory
http://www.netscreen.com/support/ns25_reboot.html

Jump to

Vulnerability Details : CVE-2002-0891

Products affected by CVE-2002-0891

Exploit prediction scoring system (EPSS) score for CVE-2002-0891

CVSS scores for CVE-2002-0891

References for CVE-2002-0891