CVE-2004-0444

2004-07-0704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

symdns.sys

symantec

norton internet security

norton personal firewall

norton antispam

client firewall

client security

remote attack

denial of service

arbitrary code execution

buffer overflow

dns component

8.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.924 High

EPSS

Percentile

99.0%

JSON

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.

CPENameOperatorVersion
symantec:norton_personal_firewallsymantec norton personal firewalleq2003
symantec:norton_internet_securitysymantec norton internet securityeq2002
symantec:client_securitysymantec client securityeq1.6
symantec:client_firewallsymantec client firewalleq5.01
symantec:norton_internet_securitysymantec norton internet securityeq2004
symantec:norton_personal_firewallsymantec norton personal firewalleq2002
symantec:norton_internet_securitysymantec norton internet securityeq2003
symantec:client_securitysymantec client securityeq1.2
symantec:client_securitysymantec client securityeq1.7
symantec:norton_personal_firewallsymantec norton personal firewalleq2004

CPE	Name	Operator	Version
symantec:norton_personal_firewall	symantec norton personal firewall	eq	2003
symantec:norton_internet_security	symantec norton internet security	eq	2002
symantec:client_security	symantec client security	eq	1.6
symantec:client_firewall	symantec client firewall	eq	5.01
symantec:norton_internet_security	symantec norton internet security	eq	2004
symantec:norton_personal_firewall	symantec norton personal firewall	eq	2002
symantec:norton_internet_security	symantec norton internet security	eq	2003
symantec:client_security	symantec client security	eq	1.2
symantec:client_security	symantec client security	eq	1.7
symantec:norton_personal_firewall	symantec norton personal firewall	eq	2004