Unscored severity · published Oct 28, 2002
CVE-2002-0990
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Enterprise Firewall · Symantec
6.5.2; 7.0; 7.0 · source: NVD
GS
Gateway Security · Symantec
5110; 5200; 5300 · source: NVD
RF
Raptor Firewall · Symantec
6.5; 6.5.3 · source: NVD
VE
Velociraptor · Symantec
500; 700; 1000; 1100; 1200; 1300 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0990
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0990
marc.info
http://marc.info/?l=bugtraq&m=103463869503124&w=2
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html
Vendor Advisory
http://www.iss.net/security_center/static/10364.php
www.securityfocus.com
http://www.securityfocus.com/bid/5958
More from Enterprise Firewall
–
CVE-2007-4422
The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not…
–
CVE-2006-2341
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP…
–
CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN…
–
CVE-2005-0817
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows…
–
CVE-2004-1029
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java…