var-200408-0170
Vulnerability from variot
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero. The issue is reported to present itself in the TCP packet processing routines of the affected software. It is reported that this vulnerability will have a system wide impact, causing Windows GUI and peripherals that are attached to the host to become unresponsive. A hard reset is reported to be required to restore normal functionality to the system. The information in this BID was consolidated from BID 10204 as both of these BIDs represented the same issue. BID 10204 is being retired. According to the report, this vulnerability cannot be exploited to execute arbitrary commands, and no detailed vulnerability details are currently available. The vulnerability allows a remote attacker to reliably render a system inoperative with one single packet. Physical access is required in order to bring an affected system out of this "frozen" state. This specific flaw exists within the component that performs low level processing of TCP packets.
Technical Description: The vulnerability exists in SYMNDIS.SYS when trying to parse through the TCP Options in a TCP packet. The only way to bring the system back online is to hard boot the system which requires physical access of the system. The attacker only needs to send a single packet to any port on the system regardless of whether or not the port is open. This flaw is still accessible even if the firewall or IDS are enabled/disabled. Below is a portion of a TCP SYN packet (total length of 44 bytes) with a bad SACK TCP option.
Sample Packet: 40 00 57 4B 00 00 01 01 05 00 || || || |______| | | | | | | | TCP Options | | Urgent Pointer | Checksum Window Size
The vulnerable code maintains an offset into the TCP option bytes, and attempts to advance past a variable-length option by adding its length to the offset. If the option's length field is zero, then this will result in an infinite loop and the machine halts completely.
Protection: Retina Network Security Scanner has been updated to identify this vulnerability.
Vendor Status: Symantec has released a patch for this vulnerability. The patch is available via the Symantec LiveUpdate service.
This vulnerability has been assigned the CVE identifier CAN-2004-0375.
Credit: Discovery: Karl Lynn
Related Links: Retina Network Security Scanner - Free 15 Day Trial http://www.eeye.com/html/Products/Retina/download.html
Greetings: The entire eEye family, Kelly H., Geoff and Sarah, Mike M. (Tocks), Dragon IDS crew, Riley's list of firewall vendors, pie in the sky charts, SCARFACE : Make Way for The Bad Guy!.
Copyright (c) 1998-2004 eEye Digital Security Permission is hereby granted for the redistribution of this alert electronically. It is not to be edited in any way without express consent of eEye. If you wish to reprint the whole or any part of this alert in any other medium excluding electronic medium, please email alert@eEye.com for permission.
Disclaimer The information within this paper may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties with regard to this information. In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or spread of this information. Any use of this information is at the user's own risk.
Feedback Please send suggestions, updates, and comments to:
eEye Digital Security http://www.eEye.com info@eEye.com
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200408-0170",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "norton personal firewall",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "2004"
},
{
"model": "norton personal firewall",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "2003"
},
{
"model": "norton internet security",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "2004"
},
{
"model": "norton internet security",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "2003"
},
{
"model": "client security",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "1.1"
},
{
"model": "client security",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "1.0"
},
{
"model": "client firewall",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "5.1.1"
},
{
"model": "client firewall",
"scope": "eq",
"trust": 1.9,
"vendor": "symantec",
"version": "5.01"
},
{
"model": "client security",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
"version": null
},
{
"model": "norton internet security",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
"version": null
},
{
"model": "client firewall",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
"version": null
},
{
"model": "norton personal firewall",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
"version": null
},
{
"model": "norton internet security professional edition",
"scope": "eq",
"trust": 0.3,
"vendor": "symantec",
"version": "2004"
},
{
"model": "norton internet security professional edition",
"scope": "eq",
"trust": 0.3,
"vendor": "symantec",
"version": "2003"
}
],
"sources": [
{
"db": "BID",
"id": "9912"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Eeye Digital Security",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
}
],
"trust": 0.6
},
"cve": "CVE-2004-0375",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 5.0,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2004-0375",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-8805",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2004-0375",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200408-182",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-8805",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-8805"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero. The issue is reported to present itself in the TCP packet processing routines of the affected software. \nIt is reported that this vulnerability will have a system wide impact, causing Windows GUI and peripherals that are attached to the host to become unresponsive. A hard reset is reported to be required to restore normal functionality to the system. \nThe information in this BID was consolidated from BID 10204 as both of these BIDs represented the same issue. BID 10204 is being retired. According to the report, this vulnerability cannot be exploited to execute arbitrary commands, and no detailed vulnerability details are currently available. The\nvulnerability allows a remote attacker to reliably render a system\ninoperative with one single packet. Physical access is required in order\nto bring an affected system out of this \"frozen\" state. This specific\nflaw exists within the component that performs low level processing of\nTCP packets. \n\nTechnical Description:\nThe vulnerability exists in SYMNDIS.SYS when trying to parse through the\nTCP Options in a TCP packet. \nThe only way to bring the system back online is to hard boot the system\nwhich requires physical access of the system. The attacker only needs\nto send a single packet to any port on the system regardless of whether\nor not the port is open. This flaw is still accessible even if the\nfirewall or IDS are enabled/disabled. Below is a portion of a TCP SYN\npacket (total length of 44 bytes) with a bad SACK TCP option. \n\nSample Packet:\n40 00 57 4B 00 00 01 01 05 00\n|___| |___| |___| |_________|\n |\t| |\t |\n |\t| | TCP Options\n |\t| Urgent Pointer\n | Checksum\nWindow Size\n\nThe vulnerable code maintains an offset into the TCP option bytes, and\nattempts to advance past a variable-length option by adding its length\nto the offset. If the option\u0027s length field is zero, then this will\nresult in an infinite loop and the machine halts completely. \n\nProtection:\nRetina Network Security Scanner has been updated to identify this\nvulnerability. \n\nVendor Status:\nSymantec has released a patch for this vulnerability. The patch is\navailable via the Symantec LiveUpdate service. \n\nThis vulnerability has been assigned the CVE identifier CAN-2004-0375. \n\nCredit:\nDiscovery: Karl Lynn\n\nRelated Links:\nRetina Network Security Scanner - Free 15 Day Trial\nhttp://www.eeye.com/html/Products/Retina/download.html\n\nGreetings:\nThe entire eEye family, Kelly H., Geoff and Sarah, Mike M. (Tocks),\nDragon IDS crew, Riley\u0027s list of firewall vendors, pie in the sky\ncharts, SCARFACE : Make Way for The Bad Guy!. \n\nCopyright (c) 1998-2004 eEye Digital Security Permission is hereby\ngranted for the redistribution of this alert electronically. It is not\nto be edited in any way without express consent of eEye. If you wish to\nreprint the whole or any part of this alert in any other medium\nexcluding electronic medium, please email alert@eEye.com for permission. \n\nDisclaimer\nThe information within this paper may change without notice. Use of this\ninformation constitutes acceptance for use in an AS IS condition. There\nare NO warranties with regard to this information. In no event shall the\nauthor be liable for any damages whatsoever arising out of or in\nconnection with the use or spread of this information. Any use of this\ninformation is at the user\u0027s own risk. \n\nFeedback\nPlease send suggestions, updates, and comments to:\n\neEye Digital Security\nhttp://www.eEye.com\ninfo@eEye.com\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0375"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "BID",
"id": "9912"
},
{
"db": "VULHUB",
"id": "VHN-8805"
},
{
"db": "PACKETSTORM",
"id": "33177"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-8805",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-8805"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2004-0375",
"trust": 3.7
},
{
"db": "BID",
"id": "9912",
"trust": 2.8
},
{
"db": "SECTRACK",
"id": "1009380",
"trust": 2.5
},
{
"db": "SECTRACK",
"id": "1009379",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20040423 EEYE: SYMANTEC MULTIPLE FIREWALL TCP OPTIONS DENIAL OF SERVICE",
"trust": 0.6
},
{
"db": "XF",
"id": "15433",
"trust": 0.6
},
{
"db": "XF",
"id": "15936",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "33177",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-77591",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "23846",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-8805",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-8805"
},
{
"db": "BID",
"id": "9912"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "PACKETSTORM",
"id": "33177"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"id": "VAR-200408-0170",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-8805"
}
],
"trust": 0.01
},
"last_update_date": "2024-06-06T22:56:19.338000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "others (CWE-Other) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.8,
"url": "http://www.eeye.com/html/research/upcoming/20040309.html"
},
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/9912"
},
{
"trust": 2.5,
"url": "http://securitytracker.com/id?1009379"
},
{
"trust": 2.5,
"url": "http://securitytracker.com/id?1009380"
},
{
"trust": 1.9,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15433"
},
{
"trust": 1.9,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15936"
},
{
"trust": 1.8,
"url": "http://marc.info/?l=bugtraq\u0026m=108275582432246\u0026w=2"
},
{
"trust": 1.7,
"url": "http://www.symantec.com/avcenter/security/content/2004.04.20.html"
},
{
"trust": 0.9,
"url": "https://nvd.nist.gov/vuln/detail/cve-2004-0375"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/15936"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/15433"
},
{
"trust": 0.6,
"url": "http://marc.theaimsgroup.com/?l=bugtraq\u0026m=108275582432246\u0026w=2"
},
{
"trust": 0.3,
"url": "http://securityresponse.symantec.com/avcenter/security/content/2004.04.20.html"
},
{
"trust": 0.1,
"url": "http://marc.info/?l=bugtraq\u0026amp;m=108275582432246\u0026amp;w=2"
},
{
"trust": 0.1,
"url": "http://www.eeye.com"
},
{
"trust": 0.1,
"url": "http://www.eeye.com/html/products/retina/download.html"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-8805"
},
{
"db": "BID",
"id": "9912"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "PACKETSTORM",
"id": "33177"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-8805"
},
{
"db": "BID",
"id": "9912"
},
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"db": "PACKETSTORM",
"id": "33177"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-08-18T00:00:00",
"db": "VULHUB",
"id": "VHN-8805"
},
{
"date": "2004-03-18T00:00:00",
"db": "BID",
"id": "9912"
},
{
"date": "2024-06-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"date": "2004-04-28T03:17:01",
"db": "PACKETSTORM",
"id": "33177"
},
{
"date": "2004-03-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"date": "2004-08-18T04:00:00",
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-8805"
},
{
"date": "2009-07-12T03:06:00",
"db": "BID",
"id": "9912"
},
{
"date": "2024-06-04T08:28:00",
"db": "JVNDB",
"id": "JVNDB-2004-000859"
},
{
"date": "2006-08-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200408-182"
},
{
"date": "2017-07-11T01:30:06.840000",
"db": "NVD",
"id": "CVE-2004-0375"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "33177"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vulnerabilities in multiple Symantec products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2004-000859"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200408-182"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.