CVE-2002-0891: Medium severity Juniper NetScreen ScreenOS vulnerability
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0891?
CVE-2002-0891 is classified as a denial of service vulnerability that can cause crashing of the affected device.
How do I fix CVE-2002-0891?
To fix CVE-2002-0891, upgrade the NetScreen ScreenOS to a version that is not affected, such as 2.6.1r8 or later.
Which versions of NetScreen ScreenOS are affected by CVE-2002-0891?
CVE-2002-0891 affects NetScreen ScreenOS versions before 2.6.1r8 and specific versions of 2.8.x and 3.0.x before 3.0.3r1.
Can CVE-2002-0891 be exploited remotely?
Yes, CVE-2002-0891 can be exploited remotely by sending a crafted long username to the web interface.
What should I do if I am using a vulnerable version of ScreenOS associated with CVE-2002-0891?
If you are using a vulnerable version of ScreenOS, it is essential to update to a secure version immediately to mitigate the risk.