PT-2004-2385 · Symantec · Symantec Gateway Security+1

Mike Sues · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63 Symantec Gateway Security versions prior to 622

Description: The issue allows remote attackers to alter the firewall's configuration file due to the use of a default read/write SNMP community string.

Recommendations: For Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63, update the firmware to version 1.63 or later. For Symantec Gateway Security versions prior to 622, update the firmware to version 622 or later.

Correção

Identificadores relacionados

CVE-2004-1474

Produtos afetados

Symantec Enterprise Firewall/Vpn Appliances

Symantec Gateway Security

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1474 · Nota de Segurança
• http://osvdb.org/10206 · Nota
• http://secunia.com/advisories/12635 · Nota
• http://marc.info/?l=bugtraq&m=109588376426070&w=2 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 · Nota
• http://securityfocus.com/bid/11237 · Correção
• http://kb.cert.org/vuls/id/173910 · Correção