PT-2002-3048 · Symantec · Norton Personal Firewall

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2336

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Norton Personal Firewall 2002 version 4.0

Description The issue allows remote attackers to cause a denial of service by blocking IP addresses via spoofed packets when the software is configured to automatically block attacks.

Recommendations For Norton Personal Firewall 2002 version 4.0, consider reconfiguring the automatic block attacks feature to prevent abuse, or temporarily disable this feature until a more robust solution is available.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2002-2336

Affected Products

Norton Personal Firewall

References · 6

• 🔥 http://securityfocus.com/bid/5917 · Exploit
• 🔥 https://exploit-db.com/exploits/21915 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2336 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html · Note
• http://iss.net/security_center/static/10314.php · Note
• http://online.securityfocus.com/archive/1/294411 · Note