CVE-2006-2341

Symantec Enterprise Firewall 8.0 / Gateway Security 2.0.1-3.0 - Internal IP Address Exposure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2341. PoCs published by Bernhard Mueller.

AI-analyzed exploit summary This exploit targets a vulnerability in Symantec Enterprise Firewall and Gateway Security products, specifically the NAT/HTTP proxy component, to disclose internal IP addresses. It sends a malformed HTTP request and parses the response to extract the internal IP address.

Description

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Bernhard Mueller · perlremotemultiple
https://www.exploit-db.com/exploits/27852

This exploit targets a vulnerability in Symantec Enterprise Firewall and Gateway Security products, specifically the NAT/HTTP proxy component, to disclose internal IP addresses. It sends a malformed HTTP request and parses the response to extract the internal IP address.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Symantec Enterprise Firewall and Gateway Security products
No auth needed
Prerequisites: Network access to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26370
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17936
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1764
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016057
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016058
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20082
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/433876/30/5040/threaded

Scores

EPSS 0.0379
EPSS Percentile 88.6%

Details

CWE
CWE-200
Status published
Products (5)
symantec/enterprise_firewall 8.0
symantec/gateway_security 2.0.1
symantec/gateway_security 3.0
symantec/gateway_security 5000_series_2.0.1
symantec/gateway_security 5000_series_3.0
Published May 12, 2006
Tracked Since Feb 18, 2026