PT-2004-2385 · Symantec · Symantec Gateway Security+1

Mike Sues · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63 Symantec Gateway Security versions prior to 622

Description: The issue allows remote attackers to alter the firewall's configuration file due to the use of a default read/write SNMP community string.

Recommendations: For Symantec Enterprise Firewall/VPN Appliances versions prior to 1.63, update the firmware to version 1.63 or later. For Symantec Gateway Security versions prior to 622, update the firmware to version 622 or later.

Fix

Related Identifiers

CVE-2004-1474

Affected Products

Symantec Enterprise Firewall/Vpn Appliances

Symantec Gateway Security

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1474 · Security Note
• http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html · Vendor Advisory
• http://securityfocus.com/bid/11237 · Patch
• http://kb.cert.org/vuls/id/173910 · Patch
• http://osvdb.org/10206 · Note
• http://secunia.com/advisories/12635 · Note
• http://marc.info/?l=bugtraq&m=109588376426070&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 · Note