CVE-2002-1463: symantec enterprise_firewall
Vulnerability summary
CVE-2002-1463 is a high (CVSS 7.5) vulnerability in symantec enterprise_firewall. EPSS estimates a 6.91% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 01-09-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.91%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 6.91% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundLinux Kernel 2.2 - Predictable TCP Initial Sequence Number
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec4 products
- enterprise_firewall6.5.2 | 7.0
- gateway_security5110 | 5200 | 5300
- raptor_firewall6.5 | 6.5.3
- velociraptormodel_500 | model_700 | model_1000 | model_1100 | model_1200 | model_1300
1 vendor · 4 products
References
5 links- archives.neohapsis.com/archives/bugtraq/2002-07/0492.htmlMailing ListX Refsource BUGTRAQPatchVendor Advisory
- www.symantec.com/techsupp/bulletin/archive/firewall/082002firewall.htmlX Refsource CONFIRMPatchVendor Advisory