CVE-2002-1535: Symantec Enterprise Firewall

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.

Affected products

• Symantec Enterprise Firewall: version 6.5.2 only
• Symantec Raptor Firewall: version 6.5 only; version 6.5.3 only

Published 2003-03-31. Last modified 2026-06-16.