CVEvulnerability

CVE-2002-2150

5.0 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

Affected configurations

• juniper netscreen screenos 2.7.1 • juniper netscreen screenos 2.7.1r1 • juniper netscreen screenos 2.7.1r2 • juniper netscreen screenos 2.7.1r3 • juniper netscreen screenos 2.10 r3 • juniper netscreen screenos 2.10 r4 • juniper netscreen screenos 3.0.1r1 • juniper netscreen screenos 3.0.1r2 • juniper netscreen screenos 3.0.3 r1.1

References