Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products

Rigel Kent Security & Advisory Services Inc http://www.rigelksecurity.com Advisory RK-001-04 Mike Sues September 22, 2004 "Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products" Platform : Symantec Enterprise Firewall/VPN Appliances 100, 200, 200R Symantec Gateway...

Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM04-013 22 September, 2004 Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Revision History None Risk Impact High Overview Symantec resolved three high-risk vulnerabilities that...

Symantec Enterprise Firewall/Symantec Gateway Security multiple bugs

DoS, UDP filtering bypass, SNMP information leakage...

CVE-2004-1694

Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access...

CVE-2004-0190

The CVE concerns the Symantec FireWall/VPN Appliance model 200 where the password for the password administration page is recorded in cleartext. This could be cached on an administrator’s local system or in a proxy, enabling an attacker to steal the password and gain privileges. The provided sour...

CVE-2002-1463

CVE-2002-1463 describes a weakness where Symantec Raptor Firewall family devices (Raptor Firewall 6.5/6.5.3, Enterprise Firewall 6.5.2/7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, Gateway Security 5110/5200/5300) generate easily predictable initial sequence numbers (ISN), enabling remote sp...

EUVD-2002-1446

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

CVE-2002-1540

The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32...

CVE-2002-1540

The vulnerability CVE-2002-1540 affects Symantec Norton AntiVirus Corporate Edition 7.5.x (pre-7.5.1 Build 62) and 7.6.x (pre-7.6.1 Build 35a), where the client runs winhlp32 with elevated privileges, enabling local privilege escalation by using certain winhlp32 features. Impact is local privileg...

CVE-2004-0190

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2002-0990

Technical details about CVE-2002-0990 are not publicly available in the provided documents. The description notes a DoS via DNS timeouts in Symantec gateway/firewall products, but no affected versions, exploit status, or mitigations are disclosed here. Monitor for updates.

CVE-2003-0994

The CVE-2003-0994 issue affects Symantec LiveUpdate GUI between versions 1.70.x and 1.90.x, as used in Norton Internet Security 2001–2004, SystemWorks 2001–2004, and Antivirus/Norton Antivirus Pro 2001–2004, plus LiveUpdate for Handhelds v3.0. The vulnerability enables local users to escalate pri...

Symantec Antivirus LiveUpdate Local Privilege Escalation

Binary data 1137.prm...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2004-0683

Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service CPU consumption via a compressed archive that contains a large number of directories...

Symantec Norton AntiVirus 2001/2002/2003/2004 - Script Blocker Denial of Service

source: https://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script Blocker bypass. The privileges and zone required so that the script is successful ...

Symantec Norton AntiVirus 2001200220032004 - Script Blocker Denial of Service

Symantec Norton AntiVirus 2001200220032004 - Script Blocker Denial of Service source: https://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script...

CVE-2004-0683

Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service CPU consumption via a compressed archive that contains a large number of directories...