PT-2004-1575 · Symantec · Norton Internet Security+5

Publicado

2004-05-20

·

Atualizado

2017-07-11

·

CVE-2004-0445

CVSS v2.0

2.6

Baixa

VetorAV:N/AC:H/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Symantec Norton Internet Security versions 2002 through 2004 Symantec Norton Professional versions 2002 through 2004 Symantec Norton Personal Firewall versions 2002 through 2004 Symantec Norton AntiSpam version 2004 Symantec Client Firewall versions 5.01 and 5.1.1 Symantec Client Security versions 1.0 through 2.0
Description The issue allows remote attackers to cause a denial of service by consuming CPU resources due to an infinite loop. This is achieved via a DNS response with a compressed name pointer that points to itself.
Recommendations For Symantec Norton Internet Security versions 2002 through 2004, update to a version that fixes this issue. For Symantec Norton Professional versions 2002 through 2004, update to a version that fixes this issue. For Symantec Norton Personal Firewall versions 2002 through 2004, update to a version that fixes this issue. For Symantec Norton AntiSpam version 2004, update to a version that fixes this issue. For Symantec Client Firewall versions 5.01 and 5.1.1, update to a version that fixes this issue. For Symantec Client Security versions 1.0 through 2.0, update to a version that fixes this issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-0445

Produtos afetados

Client Firewall
Client Security
Norton Antispam
Norton Internet Security
Norton Personal Firewall
Norton Professional