Description
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
Affected products
- Juniper / netscreen_screenos1.64 – 1.64
- Juniper / netscreen_screenos1.66 – 1.66
- Juniper / netscreen_screenos2.1 – 2.1
- Juniper / netscreen_screenos2.5 – 2.5