CVE-2004-1766
First published: Tue Jan 20 2004(Updated: )
The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper Netscreen Security Manager | ||
| Juniper Netscreen Security Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp
- http://www.kb.cert.org/vuls/id/CRDY-5VEU8N
- http://www.kb.cert.org/vuls/id/927630
- http://www.securityfocus.com/bid/9455
- http://secunia.com/advisories/10675
- http://www.juniper.net/support/security/alerts/58290.txt
- http://www.osvdb.org/3613
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14886
Frequently Asked Questions
What is the severity of CVE-2004-1766?
The severity of CVE-2004-1766 is considered moderate due to the potential for sensitive information disclosure.
How do I fix CVE-2004-1766?
To fix CVE-2004-1766, ensure that encryption for communication is enabled in the default installation of NetScreen-Security Manager.
Who is affected by CVE-2004-1766?
CVE-2004-1766 affects users of the default installation of NetScreen-Security Manager prior to Feature Pack 1.
What type of information could be exposed due to CVE-2004-1766?
CVE-2004-1766 could allow remote attackers to obtain sensitive information transmitted without encryption.
Is a patch available for CVE-2004-1766?
Yes, users should update to Feature Pack 1 or later to mitigate the vulnerability associated with CVE-2004-1766.
- agent/type
- agent/references
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/juniper
- canonical/juniper netscreen security manager