Lucene search

[email protected]CVE-2004-0375

HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0375

2004-08-1804:00:00

[email protected]

web.nvd.nist.gov

symantec

norton

internet security

nis

firewall

security vulnerability

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.022 Low

EPSS

Percentile

89.5%

JSON

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.

Affected configurations

NVD

Node

symantecclient_firewallMatch5.01

symantecclient_firewallMatch5.1.1

symantecclient_securityMatch1.0

symantecclient_securityMatch1.1

symantecnorton_internet_securityMatch2003

symantecnorton_internet_securityMatch2003pro

symantecnorton_internet_securityMatch2004

symantecnorton_internet_securityMatch2004pro

symantecnorton_personal_firewallMatch2003

symantecnorton_personal_firewallMatch2004

CPENameOperatorVersion
symantec:client_firewallsymantec client firewalleq5.01
symantec:client_firewallsymantec client firewalleq5.1.1
symantec:client_securitysymantec client securityeq1.0
symantec:client_securitysymantec client securityeq1.1
symantec:norton_internet_securitysymantec norton internet securityeq2003
symantec:norton_internet_securitysymantec norton internet securityeq2004
symantec:norton_personal_firewallsymantec norton personal firewalleq2003
symantec:norton_personal_firewallsymantec norton personal firewalleq2004

CPE	Name	Operator	Version
symantec:client_firewall	symantec client firewall	eq	5.01
symantec:client_firewall	symantec client firewall	eq	5.1.1
symantec:client_security	symantec client security	eq	1.0
symantec:client_security	symantec client security	eq	1.1
symantec:norton_internet_security	symantec norton internet security	eq	2003
symantec:norton_internet_security	symantec norton internet security	eq	2004
symantec:norton_personal_firewall	symantec norton personal firewall	eq	2003
symantec:norton_personal_firewall	symantec norton personal firewall	eq	2004

References

marc.info/?l=bugtraq&m=108275582432246&w=2

securitytracker.com/id?1009379

securitytracker.com/id?1009380

www.eeye.com/html/Research/Upcoming/20040309.html

www.securityfocus.com/bid/9912

www.symantec.com/avcenter/security/Content/2004.04.20.html

exchange.xforce.ibmcloud.com/vulnerabilities/15433

exchange.xforce.ibmcloud.com/vulnerabilities/15936

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.022 Low

EPSS

Percentile

89.5%

JSON

Related for CVE-2004-0375

nessus1 securityvulns2 cvelist1 nvd1