CVE-2002-2223

CVE-2002-2223 describes a buffer overflow vulnerability in NetScreen-Remote 8.0, affecting both the security client and VPN client. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code through specially crafted Internet Key Exchange (IKE) response packets, which could contain an oversized Security Parameter Index (SPI) field, an excessive number of payloads, or an unusually long payload. The vulnerability has a CVSS score of 5.1, indicating a network-based attack with high access complexity, requiring no authentication, and potentially leading to partial confidentiality, integrity, and availability impacts. Despite its age, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has garnered significant community discussion with 10 mentions.