PT-2004-2384 · Symantec · Symantec Gateway Security+1

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1473

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63 Symantec Gateway Security versions prior to 622

Description: The issue allows remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

Recommendations: For Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63, update the firmware to version 1.63 or later. For Symantec Gateway Security versions prior to 622, update the firmware to version 622 or later.

Correção

Identificadores relacionados

CVE-2004-1473

Produtos afetados

Symantec Enterprise Firewall/Vpn Appliances

Symantec Gateway Security

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1473 · Nota de Segurança
• http://kb.cert.org/vuls/id/329230 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17470 · Nota
• http://osvdb.org/10205 · Nota
• http://secunia.com/advisories/12635 · Nota
• http://marc.info/?l=bugtraq&m=109588376426070&w=2 · Nota
• http://securityfocus.com/bid/11237 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html · Aviso do Fabricante