|
Symantec Firewall Devices SMTP Binding Configuration Bypass
|
|
Secunia Advisory:
|
SA14428
|
|
|
Release Date:
|
2005-03-01
|
|
Last Update:
|
2005-03-03
|
|
Popularity:
|
10,374 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Exposure of sensitive information
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Symantec Firewall/VPN Appliance 100/200/200R
Symantec Gateway Security 2.x
Symantec Nexland Firewall Appliances 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-0618
|
|
Description:
Arthur Hagen has reported a security issue in various Symantec firewall devices, which may disclose sensitive information to malicious people.
The problem is caused due to an error in the SMTP binding functionality of certain devices with ISP load-balancing capabilities. This results in outbound email traffic being load-balanced regardless of the configured WAN binding selection, which may cause sensitive SMTP traffic only destined for a trusted network to be passed over an untrusted connection.
The security issue has been reported in the following versions:
* Symantec Firewall/VPN Appliance 200/200R (firmware builds prior to build 1.68 and later than 1.5Z)
* Symantec Gateway Security 360/360R (firmware builds prior to build 858)
* Symantec Gateway Security 460/460R (firmware builds prior to build 858)
* Nexland Pro800turbo (firmware builds prior to build 1.6X and later than 1.5Z)
Solution:
The vendor has issued updated firmware releases.
http://www.symantec.com/techsupp
Symantec Firewall/VPN Appliance models 200 and 200R:
Update to build 1.68.
Symantec Gateway Security Appliance 300 and 400 series:
Update to build 858.
Nexland Pro800turbo:
Update to build 1.6X.
Provided and/or discovered by:
Arthur Hagen
Changelog:
2005-03-03: Added CVE reference.
Original Advisory:
http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
