PT-2004-1574 · Symantec · Norton Internet Security+5

Published 2004-05-20 · Updated 2017-07-11 · CVE-2004-0444

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Norton Internet Security versions 2002 through 2004 Symantec Norton Professional versions 2002 through 2004 Symantec Norton Personal Firewall versions 2002 through 2004 Symantec Norton AntiSpam version 2004 Client Firewall versions 5.01 and 5.1.1 Client Security versions 1.0 through 2.0

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via multiple vulnerabilities in the SYMDNS.SYS component. This can be achieved through a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow. Additionally, a heap-based corruption problem in an NBNS response that is missing certain RR fields can be exploited. A stack-based buffer overflow in the DNS component can also occur via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.

Recommendations For Symantec Norton Internet Security versions 2002 through 2004, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities. For Symantec Norton Professional versions 2002 through 2004, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities. For Symantec Norton Personal Firewall versions 2002 through 2004, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities. For Symantec Norton AntiSpam version 2004, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities. For Client Firewall versions 5.01 and 5.1.1, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities. For Client Security versions 1.0 through 2.0, update to a version that includes a fix for the SYMDNS.SYS vulnerabilities.

Fix

Related Identifiers

CVE-2004-0444

Affected Products

Client Firewall

Client Security

Norton Antispam

Norton Internet Security

Norton Personal Firewall

Norton Professional

References · 23

• http://kb.cert.org/vuls/id/294998 · Patch
• http://kb.cert.org/vuls/id/634414 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-0444 · Security Note
• http://securityfocus.com/bid/10335 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html · Note
• http://osvdb.org/6099 · Note
• http://securitytracker.com/id?1010146 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0444 · Note
• http://securityfocus.com/bid/10333 · Note
• http://osvdb.org/6102 · Note
• http://ciac.org/ciac/bulletins/o-141.shtml · Note
• http://securitytracker.com/id?1010145 · Note
• http://kb.cert.org/vuls/id/637318 · Note
• http://securityfocus.com/bid/10334 · Note
• http://secunia.com/advisories/11066 · Note