CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.

Published: Mar 31, 2003
Updated: Apr 13, 2023
CVE: CVE-2002-1535
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
symantec / raptor_firewall	6.5.3	6.5.3.x
symantec / raptor_firewall	6.5	6.5.x
symantec / enterprise_firewall	6.5.2	6.5.2.x

http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html
http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html
http://www.iss.net/security_center/static/10363.php
http://www.securityfocus.com/bid/5959

Vulnerability Database

CVE-2002-1535