Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0538
cve-2002-0538
symantec
raptor firewall
ftp bounce
vulnerability
remote attackers
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.6%
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server’s “FTP PORT” responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the “FTP bounce” vulnerability.
Affected configurations
Node
symantecenterprise_firewallMatch6.5.2windows_2000_nt
ORsymantecenterprise_firewallMatch7.0solaris
ORsymantecenterprise_firewallMatch7.0windows_2000_nt
ORsymantecraptor_firewallMatch6.5windows_nt
ORsymantecraptor_firewallMatch6.5.3solaris
ORsymantecvelociraptorMatch1.x
Node
symantecgateway_securityMatch1.0
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.6%
Related for CVE-2002-0538