CVE

Id
18445  
CVE No.
CVE-2006-2341  
Status
Candidate  
Description
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
160220 18445 CVE-2006-2341 BUGTRAQ:20060512 SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure  View
160221 18445 CVE-2006-2341 URL:http://www.securityfocus.com/archive/1/archive/1/433876/30/5040/threaded  View
160222 18445 CVE-2006-2341 CONFIRM:http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html  View
160223 18445 CVE-2006-2341 BID:17936  View
160224 18445 CVE-2006-2341 URL:http://www.securityfocus.com/bid/17936  View
160225 18445 CVE-2006-2341 VUPEN:ADV-2006-1764  View
160226 18445 CVE-2006-2341 URL:http://www.vupen.com/english/advisories/2006/1764  View
160227 18445 CVE-2006-2341 SECTRACK:1016057  View
160228 18445 CVE-2006-2341 URL:http://securitytracker.com/id?1016057  View
160229 18445 CVE-2006-2341 SECTRACK:1016058  View
160230 18445 CVE-2006-2341 URL:http://securitytracker.com/id?1016058  View
160231 18445 CVE-2006-2341 SECUNIA:20082  View
160232 18445 CVE-2006-2341 URL:http://secunia.com/advisories/20082  View
160233 18445 CVE-2006-2341 XF:symantec-firewall-proxy-ip-disclosure(26370)  View

Related JVN