PT-2003-1268 · Raptor+1 · Raptor+2

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Secure Webserver version 1.1 in Raptor 6.5 Secure Webserver in Symantec Enterprise Firewall 6.5.2

Description The issue allows remote attackers to identify IP addresses of hosts on the internal network. This is achieved via a CONNECT request, which generates different error messages depending on whether the host is present.

Recommendations For Secure Webserver version 1.1 in Raptor 6.5, consider restricting access to the CONNECT request method until a patch is available. For Secure Webserver in Symantec Enterprise Firewall 6.5.2, restrict access to the vulnerable CONNECT request method to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1535

Produtos afetados

Raptor

Secure Webserver

Symantec Enterprise Firewall

Referências · 6

• http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html · Nota
• http://iss.net/security_center/static/10363.php · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html · Aviso do Fabricante
• http://securityfocus.com/bid/5959 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1535 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1535 · Nota