PT-2004-1523 · Symantec+1 · Gateway Security 5300+4

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-0369

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Firewall versions 7.0 through 8.0 Gateway Security 5300 version 1.0 Gateway Security 5400 version 2.0 VelociRaptor version 1.5

Description The issue is a buffer overflow in the Entrust LibKmp ISAKMP library. This allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Recommendations For Symantec Enterprise Firewall versions 7.0 through 8.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For Gateway Security 5300 version 1.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For Gateway Security 5400 version 2.0, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library. For VelociRaptor version 1.5, update to a version that includes a fix for the buffer overflow issue in the Entrust LibKmp ISAKMP library.

Fix

Related Identifiers

CVE-2004-0369

Affected Products

Entrust Libkmp Isakmp Library

Gateway Security 5300

Gateway Security 5400

Symantec Enterprise Firewall

Velociraptor

References · 7

• http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html · Vendor Advisory
• http://auscert.org.au/render.html?it=4339 · Vendor Advisory
• http://ciac.org/ciac/bulletins/o-206.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0369 · Security Note
• http://xforce.iss.net/xforce/alerts/id/181 · Vendor Advisory
• http://securityfocus.com/bid/11039 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15669 · Note