CVEvulnerability
CVE-2002-0990
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-10-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
Affected configurations
• symantec enterprise firewall 6.5.2
• symantec enterprise firewall 7.0
• symantec raptor firewall 6.5
• symantec raptor firewall 6.5.3
• symantec velociraptor 500
• symantec velociraptor 700
• symantec velociraptor 1000
• symantec velociraptor 1100
• symantec velociraptor 1200
• symantec velociraptor 1300
• symantec gateway security 5110
• symantec gateway security 5200
• symantec gateway security 5300
References
- http://marc.info/?l=bugtraq&m=103463869503124&w=2 marc.info
- http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html Patch, Vendor Advisory
- http://www.iss.net/security_center/static/10364.php Vendor Advisory
- http://www.securityfocus.com/bid/5958 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=103463869503124&w=2 marc.info
- http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html Patch, Vendor Advisory
- http://www.iss.net/security_center/static/10364.php Vendor Advisory
- http://www.securityfocus.com/bid/5958 www.securityfocus.com