CVE-2002-1535: Medium severity Symantec Enterprise Firewall vulnerability
Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1535?
CVE-2002-1535 is classified as a moderate severity vulnerability due to the potential exposure of internal network host IP addresses.
How do I fix CVE-2002-1535?
To remediate CVE-2002-1535, upgrade to the latest version of Symantec Raptor Firewall or Symantec Enterprise Firewall that addresses this vulnerability.
What systems are affected by CVE-2002-1535?
CVE-2002-1535 affects Symantec Raptor Firewall versions 6.5 and 6.5.3, as well as Symantec Enterprise Firewall version 6.5.2.
What kind of attack exploits CVE-2002-1535?
CVE-2002-1535 can be exploited by remote attackers using specially crafted CONNECT requests to reveal internal IP addresses.
Is CVE-2002-1535 still a risk today?
While CVE-2002-1535 is an older vulnerability, it may still pose a risk in environments using outdated versions of the affected software.