CVE-2006-2341
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-05-10 First Exploit
- 2006-05-11 CVE Reserved
- 2006-05-12 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-31 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/archive/1/433876/30/5040/threaded | Mailing List | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/26370 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/27852 | 2006-05-10 | |
| http://www.securityfocus.com/bid/17936 | 2024-08-07 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/20082 | 2018-10-18 | |
| http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html | 2018-10-18 | |
| http://securitytracker.com/id?1016057 | 2018-10-18 | |
| http://securitytracker.com/id?1016058 | 2018-10-18 |
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2006/1764 | 2018-10-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Enterprise Firewall Search vendor "Symantec" for product "Enterprise Firewall" | 8.0 Search vendor "Symantec" for product "Enterprise Firewall" and version "8.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Gateway Security Search vendor "Symantec" for product "Gateway Security" | 2.0.1 Search vendor "Symantec" for product "Gateway Security" and version "2.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Gateway Security Search vendor "Symantec" for product "Gateway Security" | 3.0 Search vendor "Symantec" for product "Gateway Security" and version "3.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Gateway Security Search vendor "Symantec" for product "Gateway Security" | 5000_series_2.0.1 Search vendor "Symantec" for product "Gateway Security" and version "5000_series_2.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Gateway Security Search vendor "Symantec" for product "Gateway Security" | 5000_series_3.0 Search vendor "Symantec" for product "Gateway Security" and version "5000_series_3.0" | - |
Affected
| ||||||