Login Request a demo
Unscored severity · published May 31, 2002
CVE-2002-0309
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an…
–
CVSS
1.7%
EPSS
No
On KEV
Description
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Enterprise Firewall · Symantec
6.5.2 · source: NVD
Affected product
EF
Enterprise Firewall
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0309
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0309
marc.info
http://marc.info/?l=bugtraq&m=101424307617060&w=2
marc.info
http://marc.info/?l=bugtraq&m=101430810813853&w=2
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20.html
www.iss.net
http://www.iss.net/security_center/static/8251.php
www.securityfocus.com
http://www.securityfocus.com/bid/4141
More from Enterprise Firewall
–
CVE-2007-4422
The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not…
–
CVE-2006-2341
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP…
–
CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN…
–
CVE-2005-0817
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows…
–
CVE-2004-1029
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java…