CVE-1999-0905

Denial of service in Axent Raptor firewall via malformed zero-length IP options...

EUVD-2002-2272

Malware in sbrugna...

EUVD-2002-0533

Malware in sbrugna...

EUVD-2001-0479

Malware in sbrugna...

Raptor Firewall 4.0/5.0/6.0.x Zero Length UDP Packet Resource Consumption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered. When the firewall receives zero length...

CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service service termination via 1 malformed RealAudio rad packets...

CVE-2002-2294

The CVE-2002-2294 entry describes multiple buffer overflow flaws affecting Symantec Raptor Firewall (versions 6.5/6.5.3), Enterprise Firewall 6.5.2 and 7.0, VelociRaptor series (500/700/1000 and 1100/1200/1300), and Gateway Security (5110/5200/5300). The root cause involves handling issues in two...

Raptor FW Detection (HTTP)

By sending an invalid HTTP request to an webserver behind Raptor firewall, the http proxy itself will respond. SPDX-FileCopyrightText: 2005 Holm Diening / SLITE IT-Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2002-1463

CVE-2002-1463 describes a weakness where Symantec Raptor Firewall family devices (Raptor Firewall 6.5/6.5.3, Enterprise Firewall 6.5.2/7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, Gateway Security 5110/5200/5300) generate easily predictable initial sequence numbers (ISN), enabling remote sp...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2002-0538

CVE-2002-0538 concerns the FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0, which rewrites FTP PORT responses to enable remote attackers to redirect FTP data connections to arbitrary ports. This is described as a variant of the FTP bounce vulnerability. The connected documents corr...

CVE-2002-0538

FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability...

CVE-2002-0990

The web proxy component in Symantec Enterprise Firewall SEF 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service connection resource exhaustion via multiple connection requests to domains whose DNS server...

Symantec Enterprise Firewall Secure Webserver info leak

Advanced IT-Security Advisory 02-10-2002 http://www.ai-sec.dk/ Issue: ====== Symantec Enterprise Firewall Secure Webserver info leak Problemdescription: =================== There exists a problem in Simple, secure webserver 1.1 which is shipped with Raptor Firewall 6.5 among others, in which an...

Security Advisory: Raptor Firewall Weak ISN Vulnerability

+==================================================================+ | Ubizen Security Advisory: Raptor Firewall Weak ISN Vulnerability | +==================================================================+ | [email protected] Friday August 02, 2002 |...

TCP/IP Initial Sequence Number (ISN) Reuse Weakness

The remote host seems to generate Initial Sequence Numbers ISN in a weak manner which seems to solely depend on the source and dest port of the TCP packets. An attacker may exploit this flaw to establish spoofed connections to the remote host. The Raptor Firewall and Novell NetWare are known to b...

CVE-2002-0538

FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability...

Raptor Firewall FTP Bounce vulnerability

Raptor Firewall FTP Bounce vulnerability Summary: The Raptor Firewall can make an FTP server behind it vulnerable to the well-known FTP bounce vulnerability even if the FTP server used is not susceptible to this issue. Overview: While performing a penetration test for a customer, we discovered th...

Raptor Firewall 6.5 HTTP Proxy Detection

Raptor FW 6.5 appears to be running in front of the remote web server. By sending an invalid HTTP request to a web server behind the Raptor firewall, the HTTP proxy itself will respond. The server banner of Raptor FW version 6.5 is always 'Simple, Secure Web Server 1.1'. A remote attacker could u...