What’s Vulnerable › Vulnerabilities

CVE-2005-2640

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-08-23 · updated 2026-06-16

Description

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Affected products

• Juniper Netscreen-5Gt: 5.0
• Juniper Netscreen-Idp: 3.0, 3.0r1, 3.0r2
• Juniper Netscreen-Idp 10: 3.0.1_r1
• Juniper Netscreen-Idp 100: 3.0.1_r1
• Juniper Netscreen-Idp 1000: 3.0.1_r1
• Juniper Netscreen-Idp 500: 3.0.1_r1
• Juniper Netscreen Screenos: 1.7, 1.64, 1.66, 1.66_r2, 1.73_r1, 1.73_r2 (+102)
• Neoteris Instant Virtual Extranet: 3.0, 3.1, 3.2, 3.3, 3.3.1
• Netscreen-Sa 5000 Series: all versions
• Netscreen-Sa 5020 Series: 4.2_r2.2
• Netscreen-Sa 5050 Series: 4.2_r2.2
• Netscreen Ns-10: all versions
• Netscreen Ns-100: 3.0_.pe1.0
• Netscreen Ns-204: 5.0.0_r6.0, 0110.0_11_4.0_r10.0, 0110.0_11_5.1.0_r3a
• Netscreen Ns-500: 4110.0_11_4.0_r10.0, 4110.0_11_5.1.0_r3a
• Netscreen Ns-50Ns25: 5.0.0_r6.0

References

• http://marc.info/?l=bugtraq&m=112438068426034&w=2
• http://secunia.com/advisories/16474/
• http://securitytracker.com/id?1014728
• http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm
• http://www.securityfocus.com/bid/14595
• http://marc.info/?l=bugtraq&m=112438068426034&w=2
• http://secunia.com/advisories/16474/
• http://securitytracker.com/id?1014728
• http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm
• http://www.securityfocus.com/bid/14595

Get alerted when CVE-2005-2640 or the next vulnerability affects your stack