CVE-2004-0369: Buffer Overflow
First published: Fri Dec 31 2004(Updated: )
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Entrust Libkmp Isakmp Library | ||
| Symantec Enterprise Firewall | =8.0 | |
| Symantec Enterprise Firewall | =7.0.4 | |
| Symantec Enterprise Firewall | =8.0 | |
| Symantec Enterprise Firewall | =7.0 | |
| Symantec Enterprise Firewall | =7.0.4 | |
| Symantec Velociraptor | =1.5 | |
| Symantec Gateway Security 5400 | =2.0 | |
| Symantec Gateway Security 5300 | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://xforce.iss.net/xforce/alerts/id/181
- http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
- http://www.auscert.org.au/render.html?it=4339
- http://www.ciac.org/ciac/bulletins/o-206.shtml
- http://www.securityfocus.com/bid/11039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15669
Frequently Asked Questions
What is the severity of CVE-2004-0369?
CVE-2004-0369 is classified as a critical vulnerability that can lead to remote code execution.
How do I fix CVE-2004-0369?
To fix CVE-2004-0369, apply the latest security patches provided by Symantec for the affected products.
Which products are affected by CVE-2004-0369?
CVE-2004-0369 affects Symantec Enterprise Firewall versions 7.0 to 8.0, Gateway Security 5300 and 5400, and VelociRaptor 1.5.
What type of vulnerability is CVE-2004-0369?
CVE-2004-0369 is a buffer overflow vulnerability in the Entrust LibKmp ISAKMP library.
Who can exploit CVE-2004-0369?
CVE-2004-0369 can be exploited by remote attackers who send a crafted ISAKMP payload to the vulnerable systems.
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/remedy
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/entrust
- canonical/entrust libkmp isakmp library
- vendor/symantec
- canonical/symantec enterprise firewall
- version/symantec enterprise firewall/8.0
- version/symantec enterprise firewall/7.0.4
- version/symantec enterprise firewall/7.0
- canonical/symantec velociraptor
- version/symantec velociraptor/1.5
- canonical/symantec gateway security 5400
- version/symantec gateway security 5400/2.0
- canonical/symantec gateway security 5300
- version/symantec gateway security 5300/1.0