NetSight
IP …
high7.5

CVE-2002-20001

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigg…

Impact

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.

Affected products

VendorProductAffected versions
BalasysDheater
All versions
SiemensScalance W1750d Firmware
All versions
SuseLinux Enterprise Server
Versions 11, 12, 15
F5Big-Ip Access Policy Manager
from 13.1.0 before 16.1.4
from 17.0.0 before 17.1.0
F5Big-Ip Advanced Firewall Manager
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Advanced Web Application Firewall
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Analytics
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Application Acceleration Manager
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Application Security Manager
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Application Visibility And Reporting
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Carrier-Grade Nat
from 13.1.0 through 17.1.2
Version 17.5.0
F5Big-Ip Ddos Hybrid Defender
from 13.1.0 through 17.1.2
Version 17.5.0

Weakness classification

CWE-400

References