PT-2002-1588 · Symantec · Symantec Raptor Firewall+1

Publicado 2002-07-03 · Atualizado 2011-03-08 · CVE-2002-0538

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Raptor Firewall version 6.5.3 Symantec Raptor Firewall Enterprise version 7.0

Description The FTP proxy in the affected software rewrites an FTP server's "FTP PORT" responses, allowing remote attackers to redirect FTP data connections to arbitrary ports. This issue is related to the "FTP bounce" vulnerability.

Recommendations For Symantec Raptor Firewall version 6.5.3, consider disabling the FTP proxy feature until a patch is available. For Symantec Raptor Firewall Enterprise version 7.0, restrict access to the FTP server to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0538

Produtos afetados

Symantec Raptor Firewall

Symantec Raptor Firewall Enterprise

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-0538 · Nota de Segurança
• http://securityfocus.com/bid/4522 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0538 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html · Nota
• http://iss.net/security_center/static/8847.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html · Aviso do Fabricante
• http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html · Aviso do Fabricante