First published: Fri Dec 31 2004(Updated: )
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Firewall VPN Appliance 100 | ||
Symantec Firewall VPN Appliance 200 | ||
Symantec Firewall Vpn Appliance 200r | ||
Symantec Gateway Security | =320 | |
Symantec Gateway Security | =360 | |
Symantec Gateway Security | =360r | |
Symantec Nexland Isb Soho Firewall Appliance | ||
Symantec Nexland Pro100 Firewall Appliance | ||
Symantec Nexland Pro400 Firewall Appliance | ||
Symantec Nexland Pro800 Firewall Appliance | ||
Symantec Nexland Pro800turbo Firewall Appliance | ||
Symantec Nexland Wavebase Firewall Appliance |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1472 has been classified as a moderate severity vulnerability due to its ability to cause a denial of service.
To mitigate CVE-2004-1472, update your Symantec Enterprise Firewall/VPN Appliances to firmware version 1.63 or later.
CVE-2004-1472 affects Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R, as well as several models of Symantec Gateway Security and Nexland Firewall Appliances.
CVE-2004-1472 enables remote attackers to execute a denial of service attack that can cause the affected devices to freeze.
Yes, if you are using affected Symantec devices with outdated firmware, you should take steps to address the vulnerability promptly.