PT-2002-2658 · Symantec · Symantec Firewall/Vpn Appliance

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1937

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symantec Firewall/VPN Appliance versions 100 through 200R

Description The issue allows remote attackers to perform an ARP poisoning man-in-the-middle attack by spoofing the administrator's MAC address, which is hardcoded inside the firewall's configuration. This can lead to obtaining the administrator's password.

Recommendations For versions 100 through 200R, consider changing the hardcoded administrator's MAC address to a unique value to prevent spoofing, and restrict access to the firewall's configuration to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1937

Affected Products

Symantec Firewall/Vpn Appliance

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1937 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0314.html · Note
• http://iss.net/security_center/static/10442.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0329.html · Note