CVE-2004-1754 The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional...
MediumCVSS 5.0
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec enterprise firewall | = 7.0.4 | No fix listed |
| symantec enterprise firewall | = 8.0 | No fix listed |
| symantec gateway security | = 5110_1.0 | No fix listed |
| symantec gateway security | = 5200_1.0 | No fix listed |
| symantec gateway security | = 5300_1.0 | No fix listed |
| symantec gateway security | = 5310_1.0 | No fix listed |
| symantec gateway security | = 5400_2.0 | No fix listed |
| symantec gateway security | = 5400_2.0.1 | No fix listed |
References
- 20040615 Symantec Enterprise Firewall DNSD cache poisoning Vulnerability exploit mailing-list vendor-advisory
- 11888 patch third-party-advisory vendor-advisory
- securityresponse.symantec.com patch vendor-advisory
- 10557 exploit patch vdb-entry vendor-advisory