CVE-2001-0589: Low severity Juniper NetScreen ScreenOS vulnerability
Published Aug 22, 2001
·Updated
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
Affected Software
4 affected components
Juniper NetScreen ScreenOS=1.64
Juniper NetScreen ScreenOS=1.66
Juniper NetScreen ScreenOS=2.1
Juniper NetScreen ScreenOS=2.5
Remediation
Patch Available
Event History
Aug 22, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0589?
CVE-2001-0589 is classified as a medium severity vulnerability.
2
How do I fix CVE-2001-0589?
To mitigate CVE-2001-0589, you should upgrade to a patched version of NetScreen ScreenOS that is 2.5r6 or later.
3
Which versions of NetScreen ScreenOS are affected by CVE-2001-0589?
CVE-2001-0589 affects NetScreen ScreenOS prior to version 2.5r6, including versions 1.64, 1.66, and 2.1.
4
Who is primarily affected by CVE-2001-0589?
Local attackers targeting devices running vulnerable versions of NetScreen ScreenOS are primarily affected by CVE-2001-0589.
5
What type of attack does CVE-2001-0589 enable?
CVE-2001-0589 enables local attackers to bypass the DMZ denial policy through specific traffic patterns.