PT-2003-1268 · Raptor+1 · Raptor+2

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Secure Webserver version 1.1 in Raptor 6.5 Secure Webserver in Symantec Enterprise Firewall 6.5.2

Description The issue allows remote attackers to identify IP addresses of hosts on the internal network. This is achieved via a CONNECT request, which generates different error messages depending on whether the host is present.

Recommendations For Secure Webserver version 1.1 in Raptor 6.5, consider restricting access to the CONNECT request method until a patch is available. For Secure Webserver in Symantec Enterprise Firewall 6.5.2, restrict access to the vulnerable CONNECT request method to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1535

Affected Products

Raptor

Secure Webserver

Symantec Enterprise Firewall

References · 6

• http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html · Vendor Advisory
• http://securityfocus.com/bid/5959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1535 · Security Note
• http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html · Note
• http://iss.net/security_center/static/10363.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1535 · Note