CVE-2002-0990

The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.

• http://marc.info/?l=bugtraq&m=103463869503124&w=2
• http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.htmlPatch, Vendor Advisory
• http://www.iss.net/security_center/static/10364.phpVendor Advisory
• http://www.securityfocus.com/bid/5958
• http://marc.info/?l=bugtraq&m=103463869503124&w=2
• http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.htmlPatch, Vendor Advisory
• http://www.iss.net/security_center/static/10364.phpVendor Advisory
• http://www.securityfocus.com/bid/5958

Published

Oct 28, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0984The IRC script included in Light 2.7.x before 2.7.30p5, and …
• CVE-2002-0985Argument injection vulnerability in the mail function for PH…
• CVE-2002-0986The mail function in PHP 4.x to 4.2.2 does not filter ASCII …
• CVE-2002-0987X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does no…
• CVE-2002-0988Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and Uni…
• CVE-2002-0989The URL handler in the manual browser option for Gaim before…
• CVE-2002-0991Buffer overflows in the cifslogin command for HP CIFS/9000 C…
• CVE-2002-0992Unknown vulnerability in IPV6 functionality for DCE daemons …
• CVE-2002-0993Unknown vulnerability in HP Instant Support Enterprise Editi…
• CVE-2002-0994SunPCi II VNC uses a weak authentication scheme, which allow…
• CVE-2002-0995login.php for PHPAuction allows remote attackers to gain pri…
• CVE-2002-0996Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 bef…