CVEvulnerability

CVE-2005-2640

5.0 MEDIUM Published 2005-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Affected configurations

• neoteris instant virtual extranet 3.0 • neoteris instant virtual extranet 3.1 • neoteris instant virtual extranet 3.2 • neoteris instant virtual extranet 3.3 • neoteris instant virtual extranet 3.3.1 • juniper netscreen screenos 1.7 • juniper netscreen screenos 1.64 • juniper netscreen screenos 1.66 • juniper netscreen screenos 1.66 r2 • juniper netscreen screenos 1.73 r1 • juniper netscreen screenos 1.73 r2 • juniper netscreen screenos 2.0.1 r8 • juniper netscreen screenos 2.1 • juniper netscreen screenos 2.1 r6 • juniper netscreen screenos 2.1 r7 • juniper netscreen screenos 2.5 • juniper netscreen screenos 2.5r1 • juniper netscreen screenos 2.5r2 • juniper netscreen screenos 2.5r6 • juniper netscreen screenos 2.6.0 • juniper netscreen screenos 2.6.1 • juniper netscreen screenos 2.6.1r1 • juniper netscreen screenos 2.6.1r2 • juniper netscreen screenos 2.6.1r3 • juniper netscreen screenos 2.6.1r4 • juniper netscreen screenos 2.6.1r5 • juniper netscreen screenos 2.6.1r6 • juniper netscreen screenos 2.6.1r7 • juniper netscreen screenos 2.6.1r8 • juniper netscreen screenos 2.6.1r9 • juniper netscreen screenos 2.6.1r10 • juniper netscreen screenos 2.6.1r11 • juniper netscreen screenos 2.6.1r12 • juniper netscreen screenos 2.7.1 • juniper netscreen screenos 2.7.1r1 • juniper netscreen screenos 2.7.1r2 • juniper netscreen screenos 2.7.1r3 • juniper netscreen screenos 2.8 • juniper netscreen screenos 2.8 r1 • juniper netscreen screenos 2.10 r3 • juniper netscreen screenos 2.10 r4 • juniper netscreen screenos 3.0.0 • juniper netscreen screenos 3.0.0r1 • juniper netscreen screenos 3.0.0r2 • juniper netscreen screenos 3.0.0r3 • juniper netscreen screenos 3.0.0r4 • juniper netscreen screenos 3.0.1 • juniper netscreen screenos 3.0.1r1 • juniper netscreen screenos 3.0.1r2 • juniper netscreen screenos 3.0.1r3 • juniper netscreen screenos 3.0.1r4 • juniper netscreen screenos 3.0.1r5 • juniper netscreen screenos 3.0.1r6 • juniper netscreen screenos 3.0.1r7 • juniper netscreen screenos 3.0.2 • juniper netscreen screenos 3.0.3 • juniper netscreen screenos 3.0.3 r1.1 • juniper netscreen screenos 3.0.3r1 • juniper netscreen screenos 3.0.3r2 • juniper netscreen screenos 3.0.3r3 … and 72 more

References