Vulnerability in Symantec Enterprise Firewall
CVE-2002-0990
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.
Affected products
- Symantec Enterprise_firewall — versions 6.5.2, 7.0
- Symantec Gateway_security — versions 5110, 5200, 5300
- Symantec Raptor_firewall — versions 6.5, 6.5.3
- Symantec Velociraptor — versions 500, 700, 1000
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)