CVE-2002-0990: Medium severity Symantec Enterprise Firewall vulnerability

Published Oct 28, 2002

Updated

The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.

Affected Software

14 affected components

Symantec Enterprise Firewall=6.5.2

Symantec Enterprise Firewall=7.0

Symantec Raptor Firewall=6.5

Symantec Raptor Firewall=6.5.3

Symantec VelociRaptor=500

Symantec VelociRaptor=700

Symantec VelociRaptor=1000

Symantec VelociRaptor=1100

Symantec VelociRaptor=1200

Symantec VelociRaptor=1300

Symantec Gateway Security=5110

Symantec Gateway Security=5200

Symantec Gateway Security=5300

Remediation

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html

Event History

Oct 28, 2002

CVE Published

05:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0990?

CVE-2002-0990 has a high severity rating due to its potential to cause a denial of service through connection resource exhaustion.

How do I fix CVE-2002-0990?

To mitigate CVE-2002-0990, apply patches provided by Symantec for affected firewall and gateway security products.

What products are affected by CVE-2002-0990?

CVE-2002-0990 affects Symantec Enterprise Firewall, Raptor Firewall, VelociRaptor, and Symantec Gateway Security versions 6.5.2 through 7.0.

What type of attack does CVE-2002-0990 enable?

CVE-2002-0990 enables attackers to perform a denial of service attack by exhausting connection resources.

Is CVE-2002-0990 easily exploitable?

Yes, exploiting CVE-2002-0990 requires only the ability to send multiple connection requests to the vulnerable system.