CVE-2004-0369 Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote att...
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entrust libkmp isakmp library | All versions | No fix listed |
| symantec enterprise firewall | = 7.0 | No fix listed |
| symantec enterprise firewall | = 7.0.4 | No fix listed |
| symantec enterprise firewall | = 8.0 | No fix listed |
| symantec velociraptor | = 1.5 | No fix listed |
| symantec gateway security 5300 | = 1.0 | No fix listed |
| symantec gateway security 5400 | = 2.0 | No fix listed |
References
- securityresponse.symantec.com vendor-advisory
- ESB-2004.0538 third-party-advisory vendor-advisory
- O-206 government-resource third-party-advisory vendor-advisory
- 11039 vdb-entry
- 20040826 Entrust LibKmp Library Buffer Overflow patch third-party-advisory vendor-advisory
- isakmp-spi-size-bo(15669) vdb-entry