vulnwire
5.0med

CVE-2002-0309

SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exch…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 77%
Public exploits
0
none known

SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.

Exploit prediction (EPSS)

1.66% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

References

  • marc.info /?l=bugtraq&m=101424307617060&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/8251.php · vdb-entry, x_refsource_XF, x_transferred
  • securityresponse.symantec.com /avcenter/security/Content/2002.02.20.html · x_refsource_CONFIRM, x_transferred
  • marc.info /?l=bugtraq&m=101430810813853&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/4141 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.