Description
NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections.
References
- 20020201 RE: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS mailing-list
- 20020201 NetScreen ScreenOS 2.6 Subject to Trust Interface DoS mailing-list
- 20020205 NetScreen Response to ScreenOS Port Scan DoS Vulnerability mailing-list
- netscreen-screenos-scan-dos(8057) vdb-entry
- 4015 vdb-entry