CVEvulnerability

CVE-2004-1754

5.0 MEDIUM Published 2004-06-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-06-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.

Affected configurations

• symantec enterprise firewall 7.0.4 • symantec enterprise firewall 8.0 • symantec gateway security 5110 1.0 • symantec gateway security 5200 1.0 • symantec gateway security 5300 1.0 • symantec gateway security 5310 1.0 • symantec gateway security 5400 2.0 • symantec gateway security 5400 2.0.1

References

http://lists.virus.org/bugtraq-0406/msg00234.html Exploit, Vendor Advisory
http://secunia.com/advisories/11888 Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html Patch, Vendor Advisory
http://www.securityfocus.com/bid/10557 Exploit, Patch, Vendor Advisory
http://lists.virus.org/bugtraq-0406/msg00234.html Exploit, Vendor Advisory
http://secunia.com/advisories/11888 Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html Patch, Vendor Advisory
http://www.securityfocus.com/bid/10557 Exploit, Patch, Vendor Advisory