CVE-2006-4562: Medium severity Symantec Gateway Security vulnerability
DISPUTED The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4562?
CVE-2006-4562 is considered a moderate severity vulnerability due to its potential for misuse in hiding attacker origins.
How do I fix CVE-2006-4562?
Fixing CVE-2006-4562 involves configuring the Symantec Gateway Security to disable proxy DNS queries.
What are the affected versions in CVE-2006-4562?
The affected versions include Symantec Gateway Security 320, 360, 5110, 5200, 5300, 5310, and 5400 series.
Can CVE-2006-4562 affect my network security?
Yes, CVE-2006-4562 can compromise network security by allowing remote attackers to perform arbitrary DNS queries.
Is CVE-2006-4562 still a risk in modern environments?
While the exploit relies on older versions of Symantec Gateway Security, organizations still running these versions should assess their risk.