CVE-2006-2341 - The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI

Back Back to CVE browser

MEDIUM

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI

Published May 12, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 3.79%

Description

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (9)

http://secunia.com/advisories/20082
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html
x_refsource_CONFIRMPatchVendor Advisory
http://securitytracker.com/id?1016057
vdb-entryx_refsource_SECTRACKPatch
http://securitytracker.com/id?1016058
vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/archive/1/433876/30/5040/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17936
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1764
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2342
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26370
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20082		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html		x_refsource_CONFIRMPatchVendor Advisory
http://securitytracker.com/id?1016057		vdb-entryx_refsource_SECTRACKPatch
http://securitytracker.com/id?1016058		vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/archive/1/433876/30/5040/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17936		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1764		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2342		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26370		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 12, 2006

Updated Aug 7, 2024

Reserved May 11, 2006

Link CVE-2006-2341

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2341

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 12, 2006

Updated Aug 7, 2024

Link EUVD-2006-2342

GitHub

No data