COMMAND

	
		Netscreen remote buffer overflow via IKE
	
	

SYSTEMS AFFECTED

	
		Netscreen's release previous to 4.0.0r2 ?
	
	

PROBLEM

	
		Blue Boar forwarded :
		

		In netscreen's release notes for 4.0.0r2
		

		* 21901 - (IKE) Under certain conditions, an overly  large  SPI  payload
		value in the IKE Phase 1 response message triggered a  buffer  overflow,
		or an IKE packet with a large number of payloads could trigger  a  stack
		overflow.
	
	

SOLUTION