VAR-200512-0724

Vulnerability from variot - Updated: 2023-12-18 13:25

Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device Server port). Juniper NSM is prone to a remote denial of service vulnerability. A remote attacker may trigger a crash or hang in the server and deny service to legitimate users. It should be noted that the application ships with a watchdog service that periodically restarts the services. NSM 2004 FP2 and FP3 are reportedly vulnerable. NetScreen-Security Manager (NSM) is a security management platform that provides management and monitoring of devices, networks, and security configurations and policies.

TITLE: Juniper NetScreen Security Manager Potential Denial of Service

SECUNIA ADVISORY ID: SA18232

VERIFY ADVISORY: http://secunia.com/advisories/18232/

CRITICAL: Less critical

IMPACT: DoS

WHERE:

From local network

SOFTWARE: NetScreen-Security Manager (NSM) 2004 http://secunia.com/product/2843/

DESCRIPTION: David Maciejak has reported a vulnerability in NetScreen Security Manager (NSM) which potentially can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error in "guiSrv" and "devSrv". This can be exploited to crash the service via specially crafted input sent to port 7800 and 7801.

The vulnerability has been reported in NSM 2004 FP2 and FP3. Other versions may also be affected.

SOLUTION: Update to version FP4r1 (2005.1).

PROVIDED AND/OR DISCOVERED BY: David Maciejak

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200512-0724",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "netscreen-security manager 2004",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "juniper",
        "version": "*"
      },
      {
        "model": "netscreen-security manager 2004",
        "scope": null,
        "trust": 0.6,
        "vendor": "juniper",
        "version": null
      },
      {
        "model": "netscreen-security manager fp3",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "juniper",
        "version": "2004"
      },
      {
        "model": "netscreen-security manager fp2",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "juniper",
        "version": "2004"
      },
      {
        "model": "netscreen-security manager",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "juniper",
        "version": "2005.1"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:juniper:netscreen-security_manager_2004:*:fp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:juniper:netscreen-security_manager_2004:*:fp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "David Maciejak  david.maciejak@kyxar.fr",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-4587",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-15795",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2005-4587",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200512-625",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-15795",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device Server port). Juniper NSM is prone to a remote denial of service vulnerability. \nA remote attacker may trigger a crash or hang in the server and deny service to legitimate users.  It should be noted that the application ships with a watchdog service that periodically restarts the services. \nNSM 2004 FP2 and FP3 are reportedly vulnerable. NetScreen-Security Manager (NSM) is a security management platform that provides management and monitoring of devices, networks, and security configurations and policies. \n\nTITLE:\nJuniper NetScreen Security Manager Potential Denial of Service\n\nSECUNIA ADVISORY ID:\nSA18232\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/18232/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nDoS\n\nWHERE:\n\u003eFrom local network\n\nSOFTWARE:\nNetScreen-Security Manager (NSM) 2004\nhttp://secunia.com/product/2843/\n\nDESCRIPTION:\nDavid Maciejak has reported a vulnerability in NetScreen Security\nManager (NSM) which potentially can be exploited by malicious people\nto cause a DoS (Denial of Service). \n\nThe vulnerability is caused due to an unspecified error in \"guiSrv\"\nand \"devSrv\". This can be exploited to crash the service via\nspecially crafted input sent to port 7800 and 7801. \n\nThe vulnerability has been reported in NSM 2004 FP2 and FP3. Other\nversions may also be affected. \n\nSOLUTION:\nUpdate to version FP4r1 (2005.1). \n\nPROVIDED AND/OR DISCOVERED BY:\nDavid Maciejak\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "db": "PACKETSTORM",
        "id": "42688"
      }
    ],
    "trust": 1.35
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "BID",
        "id": "16075",
        "trust": 2.0
      },
      {
        "db": "SECUNIA",
        "id": "18232",
        "trust": 1.8
      },
      {
        "db": "SECTRACK",
        "id": "1015417",
        "trust": 1.7
      },
      {
        "db": "OSVDB",
        "id": "22047",
        "trust": 1.7
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625",
        "trust": 0.7
      },
      {
        "db": "FULLDISC",
        "id": "20051227 JUNIPER NSM REMOTE DENIAL OF SERVICE",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-15795",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "42688",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "PACKETSTORM",
        "id": "42688"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "id": "VAR-200512-0724",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2023-12-18T13:25:58.915000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/16075"
      },
      {
        "trust": 1.7,
        "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1281.html"
      },
      {
        "trust": 1.7,
        "url": "http://www.osvdb.org/22047"
      },
      {
        "trust": 1.7,
        "url": "http://securitytracker.com/id?1015417"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/18232"
      },
      {
        "trust": 0.3,
        "url": "http://www.juniper.net/customers/support/products/nsm.jsp"
      },
      {
        "trust": 0.3,
        "url": "http://www.juniper.net/support/security/alerts/psn-2006-01-005.txt"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/18232/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2843/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/about_secunia_advisories/"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "PACKETSTORM",
        "id": "42688"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "PACKETSTORM",
        "id": "42688"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-12-30T00:00:00",
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "date": "2005-12-28T00:00:00",
        "db": "BID",
        "id": "16075"
      },
      {
        "date": "2005-12-31T02:14:35",
        "db": "PACKETSTORM",
        "id": "42688"
      },
      {
        "date": "2005-12-30T11:03:00",
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "date": "2005-12-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2008-09-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-15795"
      },
      {
        "date": "2006-02-07T20:54:00",
        "db": "BID",
        "id": "16075"
      },
      {
        "date": "2008-09-05T20:57:15.597000",
        "db": "NVD",
        "id": "CVE-2005-4587"
      },
      {
        "date": "2005-12-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Juniper NetScreen-Security Manager Remote Denial of Service Vulnerability",
    "sources": [
      {
        "db": "BID",
        "id": "16075"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ],
    "trust": 0.9
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200512-625"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.