CVE-2006-2341: Infoleak
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2341?
CVE-2006-2341 is classified as a medium severity vulnerability because it allows remote attackers to expose internal IP addresses.
How do I fix CVE-2006-2341?
To fix CVE-2006-2341, you should update the affected Symantec software to the latest available version that resolves this issue.
Who is affected by CVE-2006-2341?
Users of Symantec Gateway Security versions 2.0.1 and 3.0, as well as Symantec Enterprise Firewall version 8.0, are affected by CVE-2006-2341.
What can attackers do with CVE-2006-2341?
Attackers can exploit CVE-2006-2341 to send malformed HTTP requests that reveal internal IP addresses of the network.
Is there a workaround for CVE-2006-2341?
While the best resolution is to apply updates, you can minimize risk by implementing additional firewall rules to restrict access until the software is updated.