CVEvulnerability
CVE-2004-0445
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Description
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
Affected configurations
• symantec client firewall 5.01
• symantec client firewall 5.1.1
• symantec client security 1.0
• symantec client security 1.1
• symantec client security 1.2
• symantec client security 1.3
• symantec client security 1.4
• symantec client security 1.5
• symantec client security 1.6
• symantec client security 1.7
• symantec client security 1.8
• symantec client security 1.9
• symantec client security 2.0
• symantec norton antispam 2004
• symantec norton internet security 2002
• symantec norton internet security 2003
• symantec norton internet security 2004
• symantec norton personal firewall 2002
• symantec norton personal firewall 2003
• symantec norton personal firewall 2004
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html lists.grok.org.uk
- http://secunia.com/advisories/11066 secunia.com
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html Patch, Vendor Advisory
- http://securitytracker.com/id?1010144 securitytracker.com
- http://securitytracker.com/id?1010145 securitytracker.com
- http://securitytracker.com/id?1010146 securitytracker.com
- http://www.ciac.org/ciac/bulletins/o-141.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/682110 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/6100 www.osvdb.org
- http://www.securityfocus.com/bid/10336 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html lists.grok.org.uk
- http://secunia.com/advisories/11066 secunia.com
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html Patch, Vendor Advisory
- http://securitytracker.com/id?1010144 securitytracker.com
- http://securitytracker.com/id?1010145 securitytracker.com
- http://securitytracker.com/id?1010146 securitytracker.com
- http://www.ciac.org/ciac/bulletins/o-141.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/682110 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/6100 www.osvdb.org
- http://www.securityfocus.com/bid/10336 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 exchange.xforce.ibmcloud.com