CVE-2002-1937

Publication date

2005-06-28 04:00:00

Family

mitre

State

PUBLISHED

Description

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrators MAC address inside the firewalls configuration, which allows remote attackers to spoof the administrators MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrators password.