CVE-2005-0618 Misconfiguration in n/a
Attackers can intercept SMTP traffic sent to trusted networks via untrusted networks when load balancing is enabled on Symantec firewalls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0618?
CVE-2005-0618 is a medium-severity vulnerability in n/a, published on 2 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.
Which versions are affected by CVE-2005-0618?
It affects 4 products.
Products include Nexland Pro800turbo, Symantec Firewall Vpn Appliance 200r, Symantec Gateway Security 360, Symantec Gateway Security 460.
How do I fix CVE-2005-0618?
No fix has been published for CVE-2005-0618 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-0618 being exploited?
There is no known exploitation of CVE-2005-0618 in the wild and no public exploit code.
Sources
Also known as GHSA-4m34-p6mv-6g6j.