CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/6389	Patch
http://www.symantec.com/avcenter/security/Content/2002.12.12.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/10862

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:h:symantec:gateway_security:5110_1.0:::::::*
	cpe:2.3:h:symantec:gateway_security:5200_1.0:::::::*
	cpe:2.3:h:symantec:gateway_security:5300:::::::*

OR	cpe:2.3:a:symantec:enterprise_firewall:6.5.2::windows_2000_nt:::::
	cpe:2.3:a:symantec:enterprise_firewall:7.0::solaris:::::
	cpe:2.3:a:symantec:enterprise_firewall:7.0::windows_2000_nt:::::
	cpe:2.3:a:symantec:raptor_firewall:6.5::windows_nt:::::
	cpe:2.3:a:symantec:raptor_firewall:6.5.3::solaris:::::
	cpe:2.3:a:symantec:velociraptor:model_500:::::::*
	cpe:2.3:a:symantec:velociraptor:model_700:::::::*
	cpe:2.3:a:symantec:velociraptor:model_1000:::::::*
	cpe:2.3:a:symantec:velociraptor:model_1100:::::::*
	cpe:2.3:a:symantec:velociraptor:model_1200:::::::*
	cpe:2.3:a:symantec:velociraptor:model_1300:::::::*

History

No history.

Information

Published : 2002-12-31 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-2294

Mitre link : CVE-2002-2294

CVE.ORG link : CVE-2002-2294

JSON object : View

Products Affected

symantec

enterprise_firewall
velociraptor
gateway_security
raptor_firewall

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2002-2294", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-12-31T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/bid/6389", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/avcenter/security/Content/2002.12.12.html", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10862", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd)."}], "lastModified": "2017-07-29T01:29:03.997", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:symantec:gateway_security:5110_1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B647CBE-35DA-404C-BC71-0C378CC5CA1B"}, {"criteria": "cpe:2.3:h:symantec:gateway_security:5200_1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8EB8A732-3D37-4B96-8674-E03CC3826967"}, {"criteria": "cpe:2.3:h:symantec:gateway_security:5300:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF09575E-83D3-4772-816B-7D639B1C32A4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:windows_2000_nt:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0306D0E7-691F-46EB-9133-F585000476A2"}, {"criteria": "cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8656778B-9299-436B-AF8A-64C042273751"}, {"criteria": "cpe:2.3:a:symantec:enterprise_firewall:7.0:*:windows_2000_nt:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D5B3D26-F6FB-4D38-99B5-4AAF8C62F82A"}, {"criteria": "cpe:2.3:a:symantec:raptor_firewall:6.5:*:windows_nt:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D585A9BA-7F89-4382-95BB-823B83E5F222"}, {"criteria": "cpe:2.3:a:symantec:raptor_firewall:6.5.3:*:solaris:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BBE1CA5-CDB0-4C9C-A6AB-0727C56E419F"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_500:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BE710F1-F3AD-423B-A0DB-78D5F809D62E"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4F0486F-3101-4D7B-83C2-8E9F31802504"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_1000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "155FE168-A185-4D4D-923B-207F0B26EE97"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_1100:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDB06031-2EF6-4E45-977D-F28D538FB773"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_1200:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30475DFE-D476-4A6C-B851-139E927BAA25"}, {"criteria": "cpe:2.3:a:symantec:velociraptor:model_1300:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9A2EDF6-46FF-4EF5-A37A-AAD06B9A51D1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}