CVE-2004-1473

CVE-2004-1473 affects Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) and Gateway Security devices (320, 360, 360R) with firmware versions before 1.63 (or 622 respectively). The issue allows remote attackers to bypass filtering and determine if services such as tftpd, snmpd, o...

CVE-2004-1474

This CVE pertains to Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) with firmware before 1.63 and Gateway Security appliances (320, 360, 360R) with firmware before 622. The underlying issue is a default read/write SNMP community string, which lets an unauthenticated remote at...

CVE-2005-3768

CVE-2005-3768 affects Symantec Dynamic VPN Services (Enterprise Firewall, Gateway Security, and Firewall/VPN Appliance) in the IKEv1 implementation. A buffer overflow in IKEv1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demo...

CVE-2004-0190

The CVE concerns the Symantec FireWall/VPN Appliance model 200 where the password for the password administration page is recorded in cleartext. This could be cached on an administrator’s local system or in a proxy, enabling an attacker to steal the password and gain privileges. The provided sour...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R with firmware older than 1.63 are vulnerable to a remote denial of service (device freeze) via a fast UDP port scan on the WAN interface. The available sources confirm the affected models and firmware range but do not provide addition...

CVE-2002-1937

The vulnerability CVE-2002-1937 affects Symantec Firewall/VPN Appliance 100 through 200R, where the administrator’s MAC address is hardcoded into the firewall’s configuration. This allows remote attackers to spoof the administrator’s MAC address and perform an ARP poisoning man-in-the-middle atta...