CVE-2005-2640 Information disclosure in n/a
Remote attackers can enumerate valid usernames via IKE Aggressive Mode packets in Juniper Netscreen VPN, exposing user account information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-2640?
CVE-2005-2640 is a medium-severity vulnerability in n/a, published on 20 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
Which versions are affected by CVE-2005-2640?
It affects 16 products.
Products include Juniper Netscreen-5gt, Juniper Netscreen-Idp, Juniper Netscreen-Idp 10, Juniper Netscreen-Idp 100, Juniper Netscreen-Idp 1000, Juniper Netscreen-Idp 500 and 10 more.
How do I fix CVE-2005-2640?
No fix has been published for CVE-2005-2640 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2640 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-2640 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-8h6v-vg4c-567j.