PT-2002-1588 · Symantec · Symantec Raptor Firewall+1

Published 2002-07-03 · Updated 2011-03-08 · CVE-2002-0538

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Raptor Firewall version 6.5.3 Symantec Raptor Firewall Enterprise version 7.0

Description The FTP proxy in the affected software rewrites an FTP server's "FTP PORT" responses, allowing remote attackers to redirect FTP data connections to arbitrary ports. This issue is related to the "FTP bounce" vulnerability.

Recommendations For Symantec Raptor Firewall version 6.5.3, consider disabling the FTP proxy feature until a patch is available. For Symantec Raptor Firewall Enterprise version 7.0, restrict access to the FTP server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0538

Affected Products

Symantec Raptor Firewall

Symantec Raptor Firewall Enterprise

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-0538 · Security Note
• http://securityfocus.com/bid/4522 · Vendor Advisory
• http://iss.net/security_center/static/8847.php · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html · Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0538 · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html · Note