Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2003-0106
symantec
enterprise firewall
sef
http proxy
pattern matching
url bypass
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.6%
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
Affected configurations
Node
symantecenterprise_firewallMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| symantec:enterprise_firewall | symantec enterprise firewall | eq | 7.0 |
Related
securityvulns
securityvulns
nvd
nvd
CVE-2003-0106
2003-04-02 05:00:00
cvelist
cvelist
CVE-2003-0106
2003-03-27 05:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.6%
Related for CVE-2003-0106