CVE-2002-0538 Server-side request forgery in n/a
Remote attackers can redirect FTP data connections to arbitrary ports via the FTP proxy, bypassing firewall restrictions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0538?
CVE-2002-0538 is a high-severity server-side request forgery vulnerability in n/a, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability.
Which versions are affected by CVE-2002-0538?
It affects 4 products.
Products include Symantec Enterprise Firewall, Symantec Gateway Security, Symantec Raptor Firewall, Symantec Velociraptor.
How do I fix CVE-2002-0538?
No fix has been published for CVE-2002-0538 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2002-0538 being exploited?
There is no known exploitation of CVE-2002-0538 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m8wm-g2fv-r2mc.