CVE-2004-1473 Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filteri...
MediumCVSS 5.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec firewall vpn appliance 100 | All versions | No fix listed |
| symantec firewall vpn appliance 200 | All versions | No fix listed |
| symantec firewall vpn appliance 200r | All versions | No fix listed |
| symantec gateway security 320 | All versions | No fix listed |
| symantec gateway security 360 | All versions | No fix listed |
| symantec gateway security 360r | All versions | No fix listed |
| symantec nexland isb soho firewall appliance | All versions | No fix listed |
| symantec nexland pro100 firewall appliance | All versions | No fix listed |
| symantec nexland pro400 firewall appliance | All versions | No fix listed |
| symantec nexland pro800 firewall appliance | All versions | No fix listed |
| symantec nexland pro800turbo firewall appliance | All versions | No fix listed |
| symantec nexland wavebase firewall appliance | All versions | No fix listed |
References
- 20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products mailing-list
- 12635 third-party-advisory
- securityresponse.symantec.com patch vendor-advisory
- VU#329230 patch third-party-advisory us-government-resource
- 10205 vdb-entry
- 11237 vdb-entry
- symantec-udp-obtain-info(17470) vdb-entry