CVE-2002-2150

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-16

Affected products

• Netscreen Screenos (Juniper)

References

• http://www.iss.net/security_center/static/10449.php
• http://www.kb.cert.org/vuls/id/539363
• http://www.securityfocus.com/bid/6023