CVE:CVE-2005-2640
CNNVD:CNNVD-200508-259
Netscreen是Juniper提供一系列领先的联网和安全产品之一。
Juniper Netscreen集成的防火墙/VPN产品在为客户执行执行VPN安全测试时存在VPN用户名枚举漏洞，成功利用这个漏洞的攻击者可以访问VPN保护的网络资源。攻击者可以使用字典攻击判断Netscreen上有效的VPN用户名。一旦发现了用户名，攻击者就可以使用这个用户名从Netscreen获得哈希，然后离线破解判断相关的口令。
solution:Upgrade neoteris instant_virtual_extranet to a higher version than 3.0,3.1,3.2,3.3,3.3.1,and avoid the version 3.0,3.1,3.2,3.3,3.3.1; Upgrade juniper netscreen_screenos to a higher version than 1.7,1.64,1.66,1.66_r2,1.73_r1,1.73_r2,2.0.1_r8,2.1,2.1_r6,2.1_r7,2.5,2.5r1,2.5r2,2.5r6,2.6.0,2.6.1,2.6.1r1,2.6.1r2,2.6.1r3,2.6.1r4,2.6.1r5,2.6.1r6,2.6.1r7,2.6.1r8,2.6.1r9,2.6.1r10,2.6.1r11,2.6.1r12,2.7.1,2.7.1r1,2.7.1r2,2.7.1r3,2.8,2.8_r1,2.10_r3,2.10_r4,3.0.0,3.0.0r1,3.0.0r2,3.0.0r3,3.0.0r4,3.0.1,3.0.1r1,3.0.1r2,3.0.1r3,3.0.1r4,3.0.1r5,3.0.1r6,3.0.1r7,3.0.2,3.0.3,3.0.3_r1.1,3.0.3r1,3.0.3r2,3.0.3r3,3.0.3r4,3.0.3r5,3.0.3r6,3.0.3r7,3.0.3r8,3.1.0,3.1.0r1,3.1.0r2,3.1.0r3,3.1.0r4,3.1.0r5,3.1.0r6,3.1.0r7,3.1.0r8,3.1.0r9,3.1.0r10,3.1.0r11,3.1.0r12,3.1.1_r2,4.0.0,4.0.0r1,4.0.0r2,4.0.0r3,4.0.0r4,4.0.0r5,4.0.0r6,4.0.0r7,4.0.0r8,4.0.0r9,4.0.0r10,4.0.0r11,4.0.0r12,4.0.1,4.0.1r1,4.0.1r2,4.0.1r3,4.0.1r4,4.0.1r5,4.0.1r6,4.0.1r7,4.0.1r8,4.0.1r9,4.0.1r10,4.0.2,4.0.3,4.0.3r1,4.0.3r2,4.0.3r3,4.0.3r4,5.0.0,5.1.0,5.1.0r3a,5.2.0,and avoid the version 1.7,1.64,1.66,1.66_r2,1.73_r1,1.73_r2,2.0.1_r8,2.1,2.1_r6,2.1_r7,2.5,2.5r1,2.5r2,2.5r6,2.6.0,2.6.1,2.6.1r1,2.6.1r2,2.6.1r3,2.6.1r4,2.6.1r5,2.6.1r6,2.6.1r7,2.6.1r8,2.6.1r9,2.6.1r10,2.6.1r11,2.6.1r12,2.7.1,2.7.1r1,2.7.1r2,2.7.1r3,2.8,2.8_r1,2.10_r3,2.10_r4,3.0.0,3.0.0r1,3.0.0r2,3.0.0r3,3.0.0r4,3.0.1,3.0.1r1,3.0.1r2,3.0.1r3,3.0.1r4,3.0.1r5,3.0.1r6,3.0.1r7,3.0.2,3.0.3,3.0.3_r1.1,3.0.3r1,3.0.3r2,3.0.3r3,3.0.3r4,3.0.3r5,3.0.3r6,3.0.3r7,3.0.3r8,3.1.0,3.1.0r1,3.1.0r2,3.1.0r3,3.1.0r4,3.1.0r5,3.1.0r6,3.1.0r7,3.1.0r8,3.1.0r9,3.1.0r10,3.1.0r11,3.1.0r12,3.1.1_r2,4.0.0,4.0.0r1,4.0.0r2,4.0.0r3,4.0.0r4,4.0.0r5,4.0.0r6,4.0.0r7,4.0.0r8,4.0.0r9,4.0.0r10,4.0.0r11,4.0.0r12,4.0.1,4.0.1r1,4.0.1r2,4.0.1r3,4.0.1r4,4.0.1r5,4.0.1r6,4.0.1r7,4.0.1r8,4.0.1r9,4.0.1r10,4.0.2,4.0.3,4.0.3r1,4.0.3r2,4.0.3r3,4.0.3r4,5.0.0,5.1.0,5.1.0r3a,5.2.0; Upgrade netscreen ns-10 to a higher version than *; Upgrade netscreen ns-100 to a higher version than 3.0_.pe1.0,and avoid the version 3.0_.pe1.0; Upgrade netscreen ns-204 to a higher version than 5.0.0_r6.0,0110.0_11_4.0_r10.0,0110.0_11_5.1.0_r3a,and avoid the version 5.0.0_r6.0,0110.0_11_4.0_r10.0,0110.0_11_5.1.0_r3a; Upgrade netscreen ns-500 to a higher version than 4110.0_11_4.0_r10.0,4110.0_11_5.1.0_r3a,and avoid the version 4110.0_11_4.0_r10.0,4110.0_11_5.1.0_r3a; Upgrade netscreen ns-50ns25 to a higher version than 5.0.0_r6.0,and avoid the version 5.0.0_r6.0; Upgrade juniper netscreen-5gt to a higher version than 5.0,and avoid the version 5.0; Upgrade juniper netscreen-idp to a higher version than 3.0,3.0r1,3.0r2,and avoid the version 3.0,3.0r1,3.0r2; Upgrade juniper netscreen-idp_10 to a higher version than 3.0.1_r1,and avoid the version 3.0.1_r1; Upgrade juniper netscreen-idp_100 to a higher version than 3.0.1_r1,and avoid the version 3.0.1_r1; Upgrade juniper netscreen-idp_1000 to a higher version than 3.0.1_r1,and avoid the version 3.0.1_r1; Upgrade juniper netscreen-idp_500 to a higher version than 3.0.1_r1,and avoid the version 3.0.1_r1; Upgrade netscreen netscreen-sa_5000_series to a higher version than *; Upgrade netscreen netscreen-sa_5020_series to a higher version than 4.2_r2.2,and avoid the version 4.2_r2.2; Upgrade netscreen netscreen-sa_5050_series to a higher version than 4.2_r2.2,and avoid the version 4.2_r2.2