CVE-2005-2640
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
- EPSS
- 7.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- juniper:netscreen-5gt
- juniper:netscreen-idp
- juniper:netscreen-idp_10
- juniper:netscreen-idp_100
- juniper:netscreen-idp_1000
- juniper:netscreen-idp_500
- juniper:netscreen_screenos
- neoteris:instant_virtual_extranet
- netscreen:netscreen-sa_5000_series
- netscreen:netscreen-sa_5020_series
- netscreen:netscreen-sa_5050_series
- netscreen:ns-10
- netscreen:ns-100
- netscreen:ns-204
- netscreen:ns-500
- netscreen:ns-50ns25