CVE-2005-2640: Juniper Netscreen-5gt

Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days.

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Affected products

• Juniper Netscreen-5gt: version 5.0 only
• Juniper Netscreen-Idp: version 3.0 only; version 3.0r1 only; version 3.0r2 only
• Juniper Netscreen-Idp 10: version 3.0.1_r1 only
• Juniper Netscreen-Idp 100: version 3.0.1_r1 only
• Juniper Netscreen-Idp 1000: version 3.0.1_r1 only
• Juniper Netscreen-Idp 500: version 3.0.1_r1 only
• Juniper Netscreen ScreenOS: version 1.7 only; version 1.64 only; version 1.66 only; version 1.66_r2 only; version 1.73_r1 only; version 1.73_r2 only; …
• Neoteris Instant Virtual Extranet: version 3.0 only; version 3.1 only; version 3.2 only; version 3.3 only; version 3.3.1 only
• Netscreen Netscreen-Sa 5000 Series: any version
• Netscreen Netscreen-Sa 5020 Series: version 4.2_r2.2 only
• Netscreen Netscreen-Sa 5050 Series: version 4.2_r2.2 only
• Netscreen Ns-10: any version
• Netscreen Ns-100: version 3.0_.pe1.0 only
• Netscreen Ns-204: version 5.0.0_r6.0 only; version 0110.0_11_4.0_r10.0 only; version 0110.0_11_5.1.0_r3a only
• Netscreen Ns-500: version 4110.0_11_4.0_r10.0 only; version 4110.0_11_5.1.0_r3a only
• Netscreen Ns-50ns25: version 5.0.0_r6.0 only

Published 2005-08-23. Last modified 2026-06-16.