CVE-2004-1473: Medium severity Symantec Gateway Security 360 vulnerability
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1473?
CVE-2004-1473 has a medium severity due to the ability of remote attackers to bypass filtering and enumerate services.
How do I fix CVE-2004-1473?
To fix CVE-2004-1473, upgrade the affected Symantec firewall and VPN appliances to firmware version 1.63 or later.
Which devices are affected by CVE-2004-1473?
CVE-2004-1473 affects Symantec Enterprise Firewall/VPN Appliances 100, 200, 200R, and Gateway Security 320, 360, 360R running outdated firmware.
What is the impact of CVE-2004-1473 on network security?
The impact of CVE-2004-1473 is that it allows attackers to gain information about running services on the affected devices, potentially aiding further attacks.
How can I verify if my device is vulnerable to CVE-2004-1473?
To verify if your device is vulnerable to CVE-2004-1473, check if it is running a firmware version prior to 1.63 or 622 for the specific models listed.