CVE-2005-0618: The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gat

Q: How do I fix CVE-2005-0618?

pro800turbo: mitigate or apply the listed mitigation; firewall vpn appliance 200r: mitigate or apply the listed mitigation; gateway security 360: upgrade to newer than 857. Exact commands for each OS are on this page.

Q: Is CVE-2005-0618 being exploited?

CVE-2005-0618 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2005-0618 affect?

CVE-2005-0618 affects pro800turbo, firewall vpn appliance 200r, gateway security 360. Severity is medium (CVSS 6.4). The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between

Q: How urgent is CVE-2005-0618?

Priority 38/100. No elevated risk signals yet.

Routine

MEDIUM 6.4MITIGATEMITIGATEUPGRADE

CVE-2005-0618 is a medium-severity flaw (CVSS 6.4) affecting pro800turbo, firewall vpn appliance 200r, gateway security 360. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.4 (Medium)
EPSS exploit chance	1.0% (top 37%)
CISA exploited list	No
Published	2005-05-02
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: nexland · symantec

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2005-05-02 04:00 UTCPublished CVE record published
2026-06-16 22:11 UTCUpdated Record last modified

nexland pro800turbo MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

symantec firewall vpn appliance 200r MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

symantec gateway security 360 UPGRADE

Affected: <= 857

Fixed in: newer than 857

Safe to downgrade to: no unaffected older release

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

symantec gateway security 460 UPGRADE

Affected: <= 857

Fixed in: newer than 857

Safe to downgrade to: no unaffected older release

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-0618?

pro800turbo: mitigate or apply the listed mitigation; firewall vpn appliance 200r: mitigate or apply the listed mitigation; gateway security 360: upgrade to newer than 857. Exact commands for each OS are on this page.

Is CVE-2005-0618 being exploited?

CVE-2005-0618 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-0618 affect?

CVE-2005-0618 affects pro800turbo, firewall vpn appliance 200r, gateway security 360. Severity is medium (CVSS 6.4). The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between

How urgent is CVE-2005-0618?

Priority 38/100. No elevated risk signals yet.

Software pages

Symantec and Broadcom vulnerabilities

References

← Back to latest CVEs