PT-2004-2384 · Symantec · Symantec Gateway Security+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1473

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63 Symantec Gateway Security versions prior to 622

Description: The issue allows remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

Recommendations: For Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63, update the firmware to version 1.63 or later. For Symantec Gateway Security versions prior to 622, update the firmware to version 622 or later.

Fix

Related Identifiers

CVE-2004-1473

Affected Products

Symantec Enterprise Firewall/Vpn Appliances

Symantec Gateway Security

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1473 · Security Note
• http://kb.cert.org/vuls/id/329230 · Patch
• http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17470 · Note
• http://osvdb.org/10205 · Note
• http://secunia.com/advisories/12635 · Note
• http://marc.info/?l=bugtraq&m=109588376426070&w=2 · Note
• http://securityfocus.com/bid/11237 · Note