FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP servers FTP PORT responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the FTP bounce vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_firewall | Symantec | 6.5.2 (including) | 6.5.2 (including) |
| Enterprise_firewall | Symantec | 7.0 (including) | 7.0 (including) |
| Raptor_firewall | Symantec | 6.5 (including) | 6.5 (including) |
| Raptor_firewall | Symantec | 6.5.3 (including) | 6.5.3 (including) |
| Velociraptor | Symantec | 1.x (including) | 1.x (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html
- http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html
- http://www.iss.net/security_center/static/8847.php
- http://www.securityfocus.com/bid/4522
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html
- http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html
- http://www.iss.net/security_center/static/8847.php
- http://www.securityfocus.com/bid/4522