Lucene search

[email protected]CVE-2005-0618

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0618

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

symantec

firewall

vpn

appliance

smtp

vulnerability

cve-2005-0618

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.4%

JSON

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.

Affected configurations

NVD

Node

nexlandpro800turbo

symantecfirewall_vpn_appliance_200r

symantecgateway_security_360Range≤857

symantecgateway_security_460Range≤857

CPENameOperatorVersion
nexland:pro800turbonexland pro800turboeq*
symantec:firewall_vpn_appliance_200rsymantec firewall vpn appliance 200req*
symantec:gateway_security_360symantec gateway security 360le857
symantec:gateway_security_460symantec gateway security 460le857

CPE	Name	Operator	Version
nexland:pro800turbo	nexland pro800turbo	eq	*
symantec:firewall_vpn_appliance_200r	symantec firewall vpn appliance 200r	eq	*
symantec:gateway_security_360	symantec gateway security 360	le	857
symantec:gateway_security_460	symantec gateway security 460	le	857

References

secunia.com/advisories/14428

securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.4%

JSON

Related for CVE-2005-0618

nvd1 symantec1 cvelist1