Symantec Enterprise Firewall 8.0
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:enterprise_firewall:8.0:*:*:*:*:*:*:*
part: a version: 8.0 update: *
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Enterprise Firewall (6e587486-5d25-54d8-ac5c-344142f026f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2341 |
vulnerable | 2026-06-08 04:49:06.358796 |
Details available
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.
Published: 2006-05-12T01:00:00.000Z
Updated: 2024-08-07T17:43:29.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0817 |
vulnerable | 2026-06-08 04:48:13.785590 |
Details available
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:28.821Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1754 |
vulnerable | 2026-06-08 04:48:07.460613 |
Details available
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
Published: 2005-03-09T05:00:00.000Z
Updated: 2024-08-08T01:00:37.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1029 |
vulnerable | 2026-06-08 04:47:52.545123 |
Details available
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Published: 2004-11-24T05:00:00.000Z
Updated: 2024-08-08T00:39:00.544Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.