Symantec Enterprise Firewall SMTP Proxy Information Leak Vulnerability

Bugtraq ID:	4141
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 20 2002 12:00AM
Updated:	Feb 20 2002 12:00AM
Credit:	This vulnerability was submitted to BugTraq on February 20th, 2002 by Martin O'Neal <[email protected]>.
Vulnerable:	Symantec Enterprise Firewall 6.5.2 NT/2000 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Symantec Enterprise Firewall SMTP Proxy Information Leak Vulnerability

There is no exploit code required.

Symantec Enterprise Firewall SMTP Proxy Information Leak Vulnerability

Solution:
The vendor has also reported that a fix will be incorporated into Symantec Enterprise Firewall version 8.0.