CVE-2002-2294: Symantec Enterprise Firewall

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).

Affected products

• Symantec Enterprise Firewall: version 6.5.2 only; version 7.0 only
• Symantec Raptor Firewall: version 6.5 only; version 6.5.3 only
• Symantec Velociraptor: version model_500 only; version model_700 only; version model_1000 only; version model_1100 only; version model_1200 only; version model_1300 only

Published 2002-12-31. Last modified 2026-06-16.