The Grugq

The issue is related to weaknesses in the authentication procedure of the ScreenOS operating system. This allows a remote attacker to gain administrative access by entering a specially crafted password during an SSH or TELNET session.

The encryption implementation in Juniper ScreenOS makes it easier for remote attackers to discover the plaintext content of VPN sessions by sniffing the network for ciphertext data and conducting an unspecified decryption attack. This issue is related to the implementation of a cryptographic protocol, which can be exploited by a remote attacker to decrypt messages transmitted within a VPN session by analyzing network traffic.

The issue allows local users to gain privileges. It is related to the EnableNetwork method in the Network class. The `dhcp handler` argument is involved in the issue.