high7.5Public exploit code
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.2 - Predictable TCP Initial Sequence Number1999-09-27 · remote · linux · Verified
Impact
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Enterprise Firewall | Versions 6.5.2, 7.0 |
| Symantec | Raptor Firewall | Versions 6.5, 6.5.3 |
| Symantec | Velociraptor | Versions model_500, model_700, model_1000, model_1100, model_1200, model_1300 |
| Symantec | Gateway Security | Versions 5110, 5200, 5300 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0492.html
- http://www.osvdb.org/855
- http://www.securityfocus.com/bid/5387
- http://www.symantec.com/techsupp/bulletin/archive/firewall/082002firewall.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12836
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0492.html
- http://www.osvdb.org/855
- http://www.securityfocus.com/bid/5387
- http://www.symantec.com/techsupp/bulletin/archive/firewall/082002firewall.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12836