Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-2150

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

Published

2002-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper netscreen_screenos 2.7.1 Yes
Operating System juniper netscreen_screenos 2.7.1r1 Yes
Operating System juniper netscreen_screenos 2.7.1r2 Yes
Operating System juniper netscreen_screenos 2.7.1r3 Yes
Operating System juniper netscreen_screenos 2.10_r3 Yes
Operating System juniper netscreen_screenos 2.10_r4 Yes
Operating System juniper netscreen_screenos 3.0.1r1 Yes
Operating System juniper netscreen_screenos 3.0.1r2 Yes
Operating System juniper netscreen_screenos 3.0.3_r1.1 Yes
References