CVE-2002-0990: Symantec Enterprise Firewall

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.

Affected products

• Symantec Enterprise Firewall: version 6.5.2 only; version 7.0 only
• Symantec Gateway Security: version 5110 only; version 5200 only; version 5300 only
• Symantec Raptor Firewall: version 6.5 only; version 6.5.3 only
• Symantec Velociraptor: version 500 only; version 700 only; version 1000 only; version 1100 only; version 1200 only; version 1300 only

Published 2002-10-28. Last modified 2026-06-16.