How severe is CVE-2002-0891?

CVE-2002-0891 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2002-0891 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (73rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0891?

CVE-2002-0891 primarily affects Juniper Netscreen Screenos. In total, 23 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2002-0891?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-0891 published?

CVE-2002-0891 was published on 2002-10-04 and last updated on 2026-06-16.

CVE-2002-0891

CVE-2002-0891 is a medium-severity vulnerability in Juniper Netscreen Screenos with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (73rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Juniper Netscreen Screenos
Published: 2002-10-04
Last modified: 2026-06-16

Description

The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.

Frequently asked questions

What is CVE-2002-0891?: The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
How severe is CVE-2002-0891?: CVE-2002-0891 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2002-0891 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (73rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0891?: CVE-2002-0891 primarily affects Juniper Netscreen Screenos. In total, 23 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2002-0891?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-0891 published?: CVE-2002-0891 was published on 2002-10-04 and last updated on 2026-06-16.

References

Affected products (23)

cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.8_r1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*
cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*

More vulnerabilities in Juniper Netscreen Screenos

CVE-2018-0059 — Medium (CVSS 5.4): A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote…
CVE-2005-2640 — Medium (CVSS 5.0): Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE…
CVE-2004-1446 — Medium (CVSS 5.0): Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to…
CVE-2002-1547 — Medium (CVSS 5.0): Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH…
CVE-2002-2150 — Medium (CVSS 5.0): Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to…
CVE-2008-6096 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote…

All CVEs affecting Juniper Netscreen Screenos →