PT-2002-1996 · Symantec · Symantec Gateway Security+3

Published 2002-10-28 · Updated 2016-10-18 · CVE-2002-0990

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Symantec Enterprise Firewall versions 6.5.2 through 7.0 Raptor Firewall versions 6.5 and 6.5.3 VelociRaptor (affected versions not specified) Symantec Gateway Security (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service, specifically connection resource exhaustion, by making multiple connection requests to domains with unresponsive or non-existent DNS servers. This results in a long timeout.

Recommendations: For Symantec Enterprise Firewall versions 6.5.2 through 7.0, consider implementing rate limiting on connection requests to mitigate the risk of denial of service. For Raptor Firewall versions 6.5 and 6.5.3, restrict access to the web proxy component until a fix is available. For VelociRaptor and Symantec Gateway Security, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-0990

Affected Products

Raptor Firewall

Symantec Enterprise Firewall

Symantec Gateway Security

Velociraptor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0990 · Security Note
• http://iss.net/security_center/static/10364.php · Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0990 · Note
• http://securityfocus.com/bid/5958 · Note
• http://marc.info/?l=bugtraq&m=103463869503124&w=2 · Note