CVE-2004-0445 (GCVE-0-2004-0445)

Vulnerability from cvelistv5 – Published: 2004-05-20 04:00 – Updated: 2024-08-08 00:17
VLAI?
Summary
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://securitytracker.com/id?1010146 vdb-entryx_refsource_SECTRACK
http://securitytracker.com/id?1010145 vdb-entryx_refsource_SECTRACK
http://www.ciac.org/ciac/bulletins/o-141.shtml third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.kb.cert.org/vuls/id/682110 third-party-advisoryx_refsource_CERT-VN
http://www.osvdb.org/6100 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://securityresponse.symantec.com/avcenter/sec… x_refsource_CONFIRM
http://lists.grok.org.uk/pipermail/full-disclosur… mailing-listx_refsource_FULLDISC
http://securitytracker.com/id?1010144 vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/11066 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/10336 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:17:14.975Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1010146",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1010146"
          },
          {
            "name": "1010145",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1010145"
          },
          {
            "name": "O-141",
            "tags": [
              "third-party-advisory",
              "government-resource",
              "x_refsource_CIAC",
              "x_transferred"
            ],
            "url": "http://www.ciac.org/ciac/bulletins/o-141.shtml"
          },
          {
            "name": "VU#682110",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/682110"
          },
          {
            "name": "6100",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/6100"
          },
          {
            "name": "symantec-firewall-dns-dos(16132)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16132"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html"
          },
          {
            "name": "20040512 EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html"
          },
          {
            "name": "1010144",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1010144"
          },
          {
            "name": "11066",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/11066"
          },
          {
            "name": "10336",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/10336"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-05-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1010146",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1010146"
        },
        {
          "name": "1010145",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1010145"
        },
        {
          "name": "O-141",
          "tags": [
            "third-party-advisory",
            "government-resource",
            "x_refsource_CIAC"
          ],
          "url": "http://www.ciac.org/ciac/bulletins/o-141.shtml"
        },
        {
          "name": "VU#682110",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/682110"
        },
        {
          "name": "6100",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/6100"
        },
        {
          "name": "symantec-firewall-dns-dos(16132)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16132"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html"
        },
        {
          "name": "20040512 EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html"
        },
        {
          "name": "1010144",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1010144"
        },
        {
          "name": "11066",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/11066"
        },
        {
          "name": "10336",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/10336"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0445",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1010146",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1010146"
            },
            {
              "name": "1010145",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1010145"
            },
            {
              "name": "O-141",
              "refsource": "CIAC",
              "url": "http://www.ciac.org/ciac/bulletins/o-141.shtml"
            },
            {
              "name": "VU#682110",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/682110"
            },
            {
              "name": "6100",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/6100"
            },
            {
              "name": "symantec-firewall-dns-dos(16132)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16132"
            },
            {
              "name": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html",
              "refsource": "CONFIRM",
              "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html"
            },
            {
              "name": "20040512 EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html"
            },
            {
              "name": "1010144",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1010144"
            },
            {
              "name": "11066",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/11066"
            },
            {
              "name": "10336",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/10336"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0445",
    "datePublished": "2004-05-20T04:00:00",
    "dateReserved": "2004-05-04T00:00:00",
    "dateUpdated": "2024-08-08T00:17:14.975Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4AEFBAEB-18D4-4082-9F19-C47113841C89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6EA9657C-14D2-418A-AABD-96392E87F4B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C1DFD4CB-40A1-4D70-97AC-0941826F28CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7483F6DD-EDC0-497E-A5A9-B186E02CCCEA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"102D0C6A-31B8-4275-A805-4CA446D1C77F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA18147D-E618-4902-8837-5824240DD50E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"75D357CC-EAD0-42E3-B38C-BE2DC44D154E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"201403B4-3B5C-4F77-ADAE-7A553D4D58F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8D19926-AB65-4C06-8C44-7EA9B070FD1D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F27E94F-F6D6-4C40-878F-BF952658A909\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3AA71038-2D4E-4366-A3D1-AD85251B3E5F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC689F12-84C6-4B52-970F-DAF6B00B4A42\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0DDD0E02-306D-4675-B73A-2C2F619CDDCF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA28BC22-ABF0-4F1E-BA83-85B398775450\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*\", \"matchCriteriaId\": \"A5FA0458-AB41-495E-B41F-C18B4E6876CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*\", \"matchCriteriaId\": \"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*\", \"matchCriteriaId\": \"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"898D5369-E2F3-450C-8554-1C692EAA9906\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"74E5CAF7-C305-4FAF-8DA7-627D83F65185\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.\"}, {\"lang\": \"es\", \"value\": \"El controlador SYMDNS.SYS de Symantec Norton Internet Security y Professional 2002 a 2004, Norton Personal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewall 5.01 y 5.1.1, Client Securiy 1.0 a 2.0 permite a atacantes remotos causar una denegaci\\u00f3n de servicio (consumici\\u00f3n de CPU en un buble infinito) mediante una respuesta DNS con un puntero de nombre comprimido que apunta a s\\u00ed mismo.\"}]",
      "id": "CVE-2004-0445",
      "lastModified": "2024-11-20T23:48:36.143",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.6, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 4.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2004-07-07T04:00:00.000",
      "references": "[{\"url\": \"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/11066\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1010144\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://securitytracker.com/id?1010145\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://securitytracker.com/id?1010146\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.ciac.org/ciac/bulletins/o-141.shtml\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.kb.cert.org/vuls/id/682110\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"http://www.osvdb.org/6100\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/10336\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/11066\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1010144\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://securitytracker.com/id?1010145\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://securitytracker.com/id?1010146\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ciac.org/ciac/bulletins/o-141.shtml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.kb.cert.org/vuls/id/682110\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"http://www.osvdb.org/6100\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/10336\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2004-0445\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2004-07-07T04:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.\"},{\"lang\":\"es\",\"value\":\"El controlador SYMDNS.SYS de Symantec Norton Internet Security y Professional 2002 a 2004, Norton Personal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewall 5.01 y 5.1.1, Client Securiy 1.0 a 2.0 permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumici\u00f3n de CPU en un buble infinito) mediante una respuesta DNS con un puntero de nombre comprimido que apunta a s\u00ed mismo.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:N/I:N/A:P\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AEFBAEB-18D4-4082-9F19-C47113841C89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EA9657C-14D2-418A-AABD-96392E87F4B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1DFD4CB-40A1-4D70-97AC-0941826F28CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7483F6DD-EDC0-497E-A5A9-B186E02CCCEA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"102D0C6A-31B8-4275-A805-4CA446D1C77F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA18147D-E618-4902-8837-5824240DD50E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75D357CC-EAD0-42E3-B38C-BE2DC44D154E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"201403B4-3B5C-4F77-ADAE-7A553D4D58F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8D19926-AB65-4C06-8C44-7EA9B070FD1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F27E94F-F6D6-4C40-878F-BF952658A909\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AA71038-2D4E-4366-A3D1-AD85251B3E5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC689F12-84C6-4B52-970F-DAF6B00B4A42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DDD0E02-306D-4675-B73A-2C2F619CDDCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA28BC22-ABF0-4F1E-BA83-85B398775450\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*\",\"matchCriteriaId\":\"A5FA0458-AB41-495E-B41F-C18B4E6876CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*\",\"matchCriteriaId\":\"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*\",\"matchCriteriaId\":\"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"898D5369-E2F3-450C-8554-1C692EAA9906\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74E5CAF7-C305-4FAF-8DA7-627D83F65185\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500\"}]}]}],\"references\":[{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/11066\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1010144\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1010145\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1010146\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ciac.org/ciac/bulletins/o-141.shtml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.kb.cert.org/vuls/id/682110\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.osvdb.org/6100\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/10336\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/11066\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1010144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1010145\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1010146\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ciac.org/ciac/bulletins/o-141.shtml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.kb.cert.org/vuls/id/682110\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.osvdb.org/6100\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/10336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.