CVE

Id
6319  
CVE No.
CVE-2002-1937  
Status
Candidate  
Description
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator"s MAC address inside the firewall"s configuration, which allows remote attackers to spoof the administrator"s MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator"s password.  
Phase
Assigned (20050629)  
Votes
None (candidate not yet proposed)  
Comments