Vulnerability 13345 - CERT Civis.Net

Vulnerability Name:

CCN-13345

Published:

2003-10-02

Updated:

2003-10-02

Summary:

NetScreen firewall/VPN appliances, running ScreenOS, managed with HTTP, and acting as DHCP (Dynamic Host Configuration Protocol) servers, could allow a remote attacker to obtain sensitive information, caused by a memory leak. When a NetScreen device, acting as a DHCP server, receives a DHCP request, the DHCP Offer message is generated using a memory buffer that was used to hold the contents of the last HTTP management session. The DHCP Offer message does not overwrite all of the buffer. A remote attacker could exploit this vulnerability to obtain sensitive information, including the encoded version of the administrative username and password.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Consequences:

Obtain Information

References:

Source: CCN
Type: NetScreen Advisory 57983
Potential Leakage of Sensitive Information via DHCP Offer

Source: CCN
Type: BID-8762
Netscreen ScreenOS DHCP Packet Buffer Padding Information Leakage Vulnerability

Source: XF
Type: UNKNOWN
netscreen-screenos-memory-leak(13345)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.3r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.3r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.0:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r10:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r11:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r12:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r8:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.6.1r9:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.1r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.0.3r8:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r10:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r11:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r12:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r8:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:3.1.0r9:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r10:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r11:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r12:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r8:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.0r9:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r1:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r10:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r4:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r5:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r6:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r7:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r8:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.1r9:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.2:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:4.0.3r3:*:*:*:*:*:*:*

OR cpe:/o:juniper:netscreen_screenos:1.7:*:*:*:*:*:*:*

Denotes that component is vulnerable