CVE-2004-0445: Low severity Symantec Client Firewall vulnerability
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0445?
CVE-2004-0445 has been classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2004-0445?
To mitigate CVE-2004-0445, users should update their Symantec products to the latest versions that contain the necessary security patches.
Which products are affected by CVE-2004-0445?
CVE-2004-0445 affects various versions of Symantec Norton Internet Security, Norton Personal Firewall, Norton AntiSpam, Client Firewall, and Client Security.
What type of attack does CVE-2004-0445 enable?
CVE-2004-0445 enables remote attackers to execute a denial of service attack by consuming excessive CPU resources.
Can CVE-2004-0445 be exploited remotely?
Yes, CVE-2004-0445 can be exploited remotely, allowing attackers to disrupt service on affected systems without local access.