CVE
- Id
- 6319
- CVE No.
- CVE-2002-1937
- Status
- Candidate
- Description
- Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator"s MAC address inside the firewall"s configuration, which allows remote attackers to spoof the administrator"s MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator"s password.
- Phase
- Assigned (20050629)
- Votes
- None (candidate not yet proposed)
- Comments