virus logo Intrusion Prevention

Symantec.Firewall.Fake.DNS.Response

description-logoDescription

This indicates an attempt to exploit a Buffer Overflow vulnerability in Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall, Gateway Security, and VelociRaptor.

affected-products-logoAffected Products

Symantec Enterprise Firewall 8.0 Solaris
Symantec Enterprise Firewall 8.0 NT/2000
Symantec Enterprise Firewall 7.0.4 Solaris
Symantec Enterprise Firewall 7.0.4 NT/2000
Symantec Enterprise Firewall 7.0 Solaris
Symantec Enterprise Firewall 7.0 NT/2000
Symantec Gateway Security 5300 1.0
Symantec Gateway Security 5400 2.0
Symantec VelociRaptor 1.5

Impact logoImpact

Denial of Service.
System Compromise: Execution of arbitrary code.

recomended-action-logoRecommended Actions

Apply the appropriate hotfix for this vulnerability.
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 29153
Created Sep 16, 2011
Updated Jun 09, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2004-0369
Exploit Prediction Score 12.94%
Default Action drop
Active
Affected OS Windows, Linux, Solaris, Other
Affected App Other