PT-2002-2658 · Symantec · Symantec Firewall/Vpn Appliance

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1937

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symantec Firewall/VPN Appliance versions 100 through 200R

Description The issue allows remote attackers to perform an ARP poisoning man-in-the-middle attack by spoofing the administrator's MAC address, which is hardcoded inside the firewall's configuration. This can lead to obtaining the administrator's password.

Recommendations For versions 100 through 200R, consider changing the hardcoded administrator's MAC address to a unique value to prevent spoofing, and restrict access to the firewall's configuration to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1937

Produtos afetados

Symantec Firewall/Vpn Appliance

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1937 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0314.html · Nota
• http://iss.net/security_center/static/10442.php · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0329.html · Nota