PT-2004-1523 · Symantec+1 · Gateway Security 5300+4

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-0369

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Firewall versions 7.0 through 8.0 Gateway Security 5300 version 1.0 Gateway Security 5400 version 2.0 VelociRaptor version 1.5

Description The issue is a buffer overflow in the Entrust LibKmp ISAKMP library. This allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Recommendations For Symantec Enterprise Firewall versions 7.0 through 8.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For Gateway Security 5300 version 1.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For Gateway Security 5400 version 2.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For VelociRaptor version 1.5, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library.

Correção

Identificadores relacionados

CVE-2004-0369

Produtos afetados

Entrust Libkmp Isakmp Library

Gateway Security 5300

Gateway Security 5400

Symantec Enterprise Firewall

Velociraptor

Referências · 7

• http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html · Aviso do Fabricante
• http://securityfocus.com/bid/11039 · Nota
• http://auscert.org.au/render.html?it=4339 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15669 · Nota
• http://ciac.org/ciac/bulletins/o-206.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0369 · Nota de Segurança
• http://xforce.iss.net/xforce/alerts/id/181 · Aviso do Fabricante