CVE-2002-0309: Medium severity Symantec Enterprise Firewall vulnerability
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0309?
CVE-2002-0309 is considered a moderate severity vulnerability due to its potential impact on firewall configuration information leakage.
How do I fix CVE-2002-0309?
To mitigate CVE-2002-0309, it is recommended to upgrade to a patched version of Symantec Enterprise Firewall that addresses this vulnerability.
What does CVE-2002-0309 affect?
CVE-2002-0309 affects Symantec Enterprise Firewall version 6.5.2 specifically during SMTP proxy operations.
What type of information can be leaked in CVE-2002-0309?
CVE-2002-0309 allows remote attackers to determine the firewall's physical interface name and address through SMTP protocol exchanges.
Is CVE-2002-0309 still a threat today?
While CVE-2002-0309 is an older vulnerability, systems running the affected versions of Symantec Enterprise Firewall may still be at risk if not updated.