CVE-2002-0302: Medium severity Symantec Enterprise Firewall vulnerability

Published May 31, 2002

Updated

The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack.

Affected Software

2 affected components

Symantec Enterprise Firewall=7.0

Symantec Enterprise Firewall=6.5.2

Remediation

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20a.html

Event History

May 31, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0302?

CVE-2002-0302 has a moderate severity rating due to its impact on alert notification during security events.

How does CVE-2002-0302 affect Symantec Enterprise Firewall?

CVE-2002-0302 affects Symantec Enterprise Firewall by causing the Notify daemon to drop large alerts transmitted via SNMP.

What versions of Symantec Enterprise Firewall are affected by CVE-2002-0302?

CVE-2002-0302 affects Symantec Enterprise Firewall versions 6.5.x and includes 7.0.

What can happen if CVE-2002-0302 is exploited?

If CVE-2002-0302 is exploited, important security alerts may not be sent, hindering the response to an ongoing attack.

How can I mitigate the effects of CVE-2002-0302?

Mitigating CVE-2002-0302 may involve configuring alert sizes or upgrading to the latest version of Symantec Enterprise Firewall.