CVE-2002-2150

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

Affected products

Juniper Netscreen Screenos: 2.7.1, 2.7.1r1, 2.7.1r2, 2.7.1r3, 2.10_r3, 2.10_r4 (+3)

References

http://www.iss.net/security_center/static/10449.php
http://www.kb.cert.org/vuls/id/539363
http://www.securityfocus.com/bid/6023
http://www.iss.net/security_center/static/10449.php
http://www.kb.cert.org/vuls/id/539363
http://www.securityfocus.com/bid/6023

Get alerted when CVE-2002-2150 or the next vulnerability affects your stack