Unscored CVE-2002-1937 EUVD-2002-1916GHSA-4mv8-w5x5-hv29

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allow…

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password.

References

20021022 Re: Sniffing Administrator's Password in Symantec Firewall/VPN Appliance V. 200R mailing-list
firewallvpn-arp-mitm(10442) vdb-entry
20021022 Sniffing Administrator's Password in Symantec Firewall/VPN Appliance V. 200R mailing-list