PT-2002-1691 · Symantec · Norton Internet Security+1

Published 2002-07-26 · Updated 2008-09-10 · CVE-2002-0663

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Norton Personal Internet Firewall version 3.0.4.91 Norton Internet Security version 2001

Description A buffer overflow issue exists in the HTTP Proxy component, allowing remote attackers to cause a denial of service and possibly execute arbitrary code by sending a large outgoing HTTP request.

Recommendations For Symantec Norton Personal Internet Firewall version 3.0.4.91, update to a newer version that addresses this issue. For Norton Internet Security version 2001, update to a newer version that addresses this issue. As a temporary workaround, consider restricting outgoing HTTP requests to prevent potential exploitation.

Fix

Related Identifiers

CVE-2002-0663

Affected Products

Norton Internet Security

Symantec Norton Personal Internet Firewall

References · 6

• http://atstake.com/research/advisories/2002/a071502-1.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0663 · Security Note
• http://osvdb.org/4366 · Note
• http://securityresponse.symantec.com/avcenter/security/Content/2002.07.15.html · Note
• http://iss.net/security_center/static/9579.php · Note
• http://securityfocus.com/bid/5237 · Note