VULHUB ™

NetScreen is a line of Internet security appliances integrating firewall, VPN and traffic management features. ScreenOS is the software used to manage and configure the firewall. NetScreen supports Microsoft Windows 95, 98, ME, NT and 2000 clients. An issue exists in ScreenOS which could allow a remote attacker to bypass the spoofing protection provided by NetScreen. The feature which handles spoofed packets is not consistently discarding these packets. Thus, an attacker aware of the conditions required to evade spoof protection may be able to transmit spoofed packets beyond the ScreenOS device, possibly aiding in a more sophisticated attack. Standard firewall policy is still applied to these packets.

NetScreen is a line of Internet security appliances integrating firewall, VPN and traffic management features. ScreenOS is the software used to manage and configure the firewall. NetScreen supports Microsoft Windows 95, 98, ME, NT and 2000 clients. An issue exists in ScreenOS which could allow a remote attacker to bypass the spoofing protection provided by NetScreen. The feature which handles spoofed packets is not consistently discarding these packets. Thus, an attacker aware of the conditions required to evade spoof protection may be able to transmit spoofed packets beyond the ScreenOS device, possibly aiding in a more sophisticated attack. Standard firewall policy is still applied to these packets.