CVE-2004-1754: Medium severity Symantec Enterprise Firewall vulnerability
Published Jun 15, 2004
·Updated
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
Affected Software
11 affected components
Symantec Enterprise Firewall=8.0
Symantec Enterprise Firewall=8.0
Symantec Enterprise Firewall=7.0.4
Symantec Enterprise Firewall=8.0
Symantec Enterprise Firewall=7.0.4
Symantec Gateway Security=5310_1.0
Symantec Gateway Security=5400_2.0.1
Symantec Gateway Security=5200_1.0
Symantec Gateway Security=5400_2.0
Symantec Gateway Security=5300_1.0
Symantec Gateway Security=5110_1.0
Remediation
Patch Available
Patch Available
Event History
Jun 15, 2004
CVE Published
04:00 AM
Mar 9, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1754?
CVE-2004-1754 is classified as a critical vulnerability due to the potential for remote DNS cache poisoning.
2
How do I fix CVE-2004-1754?
To fix CVE-2004-1754, apply the latest security patches provided by Symantec for affected products.
3
What products are affected by CVE-2004-1754?
CVE-2004-1754 affects multiple versions of Symantec Enterprise Firewall and various models of Symantec Gateway Security.
4
What impact does CVE-2004-1754 have on security?
CVE-2004-1754 allows attackers to redirect users to malicious sites through DNS cache poisoning.
5
Can CVE-2004-1754 be exploited remotely?
Yes, CVE-2004-1754 can be exploited remotely as it involves attackers sending malicious DNS responses.