Enterprise Firewall (Symantec) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2007-08-18. Vendor: Symantec.
CVEs of Enterprise Firewall
- CVE-2007-4422 - CVSS 9.3 (critical), 2007-08-18: The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses…
- CVE-2006-2341 - CVSS 5 (medium), 2006-05-12: The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to…
- CVE-2005-3768 - CVSS 7.5 (high), 2005-11-23: Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway…
- CVE-2005-0817 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor…
- CVE-2004-1029 - CVSS 9.3 (critical), 2005-03-01: The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access…
- CVE-2004-0369 - CVSS 7.5 (high), 2004-12-31: Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400…
- CVE-2004-1754 - CVSS 5 (medium), 2004-06-15: The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response…
- CVE-2002-1463 - CVSS 7.5 (high), 2003-06-09: Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security…
- CVE-2003-0106 - CVSS 7.5 (high), 2003-04-02: The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded…
- CVE-2002-1535 - CVSS 5 (medium), 2003-03-31: Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network…
- CVE-2002-2294 - CVSS 5 (medium), 2002-12-31: Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and…
- CVE-2002-0990 - CVSS 5 (medium), 2002-10-28: The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security…
- CVE-2002-0538 - CVSS 7.5 (high), 2002-07-03: FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect…
- CVE-2002-0309 - CVSS 5 (medium), 2002-05-31: SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT…
- CVE-2002-0302 - CVSS 5 (medium), 2002-05-31: The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from…
