Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-0369 | First vendor Publication | 2004-12-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0369 |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 9449 | Symantec VelociRaptor ISAKMPd Handling DoS Symantec VelociRaptor contains a flaw that may allow a remote denial of service. The issue is triggered when a specially crafted ISAKMP packet causes a boundary error in the Entrust LibKmp library used for ISAKMP packet processing, and results in loss of availability for the VPN service. |
| 9448 | Symantec Enterprise Firewall ISAKMPd Handling DoS Symantec Enterprise Firewall contains a flaw that may allow a remote denial of service. The issue is triggered when a specially crafted ISAKMP packet causes a boundary error in the Entrust LibKmp library used for ISAKMP packet processing, and results in loss of availability for the VPN service. |
| 9165 | Symantec Gateway Security ISAKMPd Handling DoS Symantec Gateway Security contains a flaw that may allow a remote denial of service. The issue is triggered when a specially crafted ISAKMP packet causes a boundary error in the Entrust LibKmp library used for ISAKMP packet processing, and results in loss of availability for the VPN service. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Symantec Multiple Products ISAKMPd denial of service attempt RuleID : 15969 - Revision : 6 - Type : SERVER-OTHER |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:37 |
|
| 2024-11-28 12:06:04 |
|
| 2021-05-04 12:02:19 |
|
| 2021-04-22 01:02:28 |
|
| 2020-05-23 00:15:46 |
|
| 2017-07-11 12:01:25 |
|
| 2014-01-19 21:22:11 |
|
| 2013-05-11 11:41:24 |
|
