CVE-2004-1446: Medium severity juniper netscreen screenos vulnerability
Published Dec 31, 2004
·Updated
Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted SSH v1 packet.
Affected Software
106 affected components
Juniper NetScreen ScreenOS=1.7
Juniper NetScreen ScreenOS=1.64
Juniper NetScreen ScreenOS=1.66
Juniper NetScreen ScreenOS=1.66_r2
Juniper NetScreen ScreenOS=1.73_r1
Juniper NetScreen ScreenOS=1.73_r2
Juniper NetScreen ScreenOS=2.0.1_r8
Juniper NetScreen ScreenOS=2.1
Juniper NetScreen ScreenOS=2.1_r6
Juniper NetScreen ScreenOS=2.1_r7
Juniper NetScreen ScreenOS=2.5
Juniper NetScreen ScreenOS=2.5r1
Juniper NetScreen ScreenOS=2.5r2
Juniper NetScreen ScreenOS=2.5r6
Juniper NetScreen ScreenOS=2.6.0
Juniper NetScreen ScreenOS=2.6.1
Juniper NetScreen ScreenOS=2.6.1r1
Juniper NetScreen ScreenOS=2.6.1r2
Juniper NetScreen ScreenOS=2.6.1r3
Juniper NetScreen ScreenOS=2.6.1r4
Juniper NetScreen ScreenOS=2.6.1r5
Juniper NetScreen ScreenOS=2.6.1r6
Juniper NetScreen ScreenOS=2.6.1r7
Juniper NetScreen ScreenOS=2.6.1r8
Juniper NetScreen ScreenOS=2.6.1r9
Juniper NetScreen ScreenOS=2.6.1r10
Juniper NetScreen ScreenOS=2.6.1r11
Juniper NetScreen ScreenOS=2.6.1r12
Juniper NetScreen ScreenOS=2.7.1
Juniper NetScreen ScreenOS=2.7.1r1
Juniper NetScreen ScreenOS=2.7.1r2
Juniper NetScreen ScreenOS=2.7.1r3
Juniper NetScreen ScreenOS=2.8
Juniper NetScreen ScreenOS=2.8_r1
Juniper NetScreen ScreenOS=2.10_r3
Juniper NetScreen ScreenOS=2.10_r4
Juniper NetScreen ScreenOS=3.0.0
Juniper NetScreen ScreenOS=3.0.0r1
Juniper NetScreen ScreenOS=3.0.0r2
Juniper NetScreen ScreenOS=3.0.0r3
Juniper NetScreen ScreenOS=3.0.0r4
Juniper NetScreen ScreenOS=3.0.1
Juniper NetScreen ScreenOS=3.0.1r1
Juniper NetScreen ScreenOS=3.0.1r2
Juniper NetScreen ScreenOS=3.0.1r3
Juniper NetScreen ScreenOS=3.0.1r4
Juniper NetScreen ScreenOS=3.0.1r5
Juniper NetScreen ScreenOS=3.0.1r6
Juniper NetScreen ScreenOS=3.0.1r7
Juniper NetScreen ScreenOS=3.0.2
Juniper NetScreen ScreenOS=3.0.3
Juniper NetScreen ScreenOS=3.0.3_r1.1
Juniper NetScreen ScreenOS=3.0.3r1
Juniper NetScreen ScreenOS=3.0.3r2
Juniper NetScreen ScreenOS=3.0.3r3
Juniper NetScreen ScreenOS=3.0.3r4
Juniper NetScreen ScreenOS=3.0.3r5
Juniper NetScreen ScreenOS=3.0.3r6
Juniper NetScreen ScreenOS=3.0.3r7
Juniper NetScreen ScreenOS=3.0.3r8
Juniper NetScreen ScreenOS=3.1.0
Juniper NetScreen ScreenOS=3.1.0r1
Juniper NetScreen ScreenOS=3.1.0r2
Juniper NetScreen ScreenOS=3.1.0r3
Juniper NetScreen ScreenOS=3.1.0r4
Juniper NetScreen ScreenOS=3.1.0r5
Juniper NetScreen ScreenOS=3.1.0r6
Juniper NetScreen ScreenOS=3.1.0r7
Juniper NetScreen ScreenOS=3.1.0r8
Juniper NetScreen ScreenOS=3.1.0r9
Juniper NetScreen ScreenOS=3.1.0r10
Juniper NetScreen ScreenOS=3.1.0r11
Juniper NetScreen ScreenOS=3.1.0r12
Juniper NetScreen ScreenOS=3.1.1_r2
Juniper NetScreen ScreenOS=4.0.0
Juniper NetScreen ScreenOS=4.0.0
Juniper NetScreen ScreenOS=4.0.0r1
Juniper NetScreen ScreenOS=4.0.0r2
Juniper NetScreen ScreenOS=4.0.0r3
Juniper NetScreen ScreenOS=4.0.0r4
Juniper NetScreen ScreenOS=4.0.0r5
Juniper NetScreen ScreenOS=4.0.0r6
Juniper NetScreen ScreenOS=4.0.0r7
Juniper NetScreen ScreenOS=4.0.0r8
Juniper NetScreen ScreenOS=4.0.0r9
Juniper NetScreen ScreenOS=4.0.0r10
Juniper NetScreen ScreenOS=4.0.0r11
Juniper NetScreen ScreenOS=4.0.0r12
Juniper NetScreen ScreenOS=4.0.1
Juniper NetScreen ScreenOS=4.0.1r1
Juniper NetScreen ScreenOS=4.0.1r2
Juniper NetScreen ScreenOS=4.0.1r3
Juniper NetScreen ScreenOS=4.0.1r4
Juniper NetScreen ScreenOS=4.0.1r5
Juniper NetScreen ScreenOS=4.0.1r6
Juniper NetScreen ScreenOS=4.0.1r7
Juniper NetScreen ScreenOS=4.0.1r8
Juniper NetScreen ScreenOS=4.0.1r9
Juniper NetScreen ScreenOS=4.0.1r10
Juniper NetScreen ScreenOS=4.0.2
Juniper NetScreen ScreenOS=4.0.3
Juniper NetScreen ScreenOS=4.0.3r1
Juniper NetScreen ScreenOS=4.0.3r2
Juniper NetScreen ScreenOS=4.0.3r3
Juniper NetScreen ScreenOS=4.0.3r4
Juniper NetScreen ScreenOS=5.0.0
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Feb 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1446?
CVE-2004-1446 is classified as a denial of service vulnerability that can cause device reboot or hang.
2
How do I fix CVE-2004-1446?
To mitigate CVE-2004-1446, you should upgrade your Juniper Networks NetScreen ScreenOS to the latest version that addresses this vulnerability.
3
Which versions of ScreenOS are affected by CVE-2004-1446?
CVE-2004-1446 affects multiple versions of Juniper Networks NetScreen ScreenOS ranging from 2.5 to 5.x.
4
Can CVE-2004-1446 be exploited remotely?
Yes, CVE-2004-1446 can be exploited by remote attackers sending crafted SSH v1 packets.
5
What impact does CVE-2004-1446 have on system availability?
CVE-2004-1446 can lead to denial of service by causing the affected device to reboot or hang.