CVE-2004-0369

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://xforce.iss.net/xforce/alerts/id/181	Patch Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html	Vendor Advisory
http://www.auscert.org.au/render.html?it=4339	Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtml	Vendor Advisory
http://www.securityfocus.com/bid/11039
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:symantec:velociraptor:1.5:::::::*
	cpe:2.3:a:symantec:enterprise_firewall:7.0.4::windows_2000_nt:::::
	cpe:2.3:a:symantec:enterprise_firewall:7.0::solaris:::::
	cpe:2.3:a:entrust:entrust_libkmp_isakmp_library::::::::
	cpe:2.3:a:symantec:enterprise_firewall:7.0.4::solaris:::::
	cpe:2.3:a:symantec:enterprise_firewall:8.0::solaris:::::
	cpe:2.3:a:symantec:enterprise_firewall:8.0::windows_2000_nt:::::

Configuration 2 (hide)

OR	cpe:2.3:h:symantec:gateway_security_5300:1.0:::::::*
	cpe:2.3:h:symantec:gateway_security_5400:2.0:::::::*

Information

Published : 2004-12-31 05:00

Updated : 2017-07-11 01:30

NVD link : CVE-2004-0369

Mitre link : CVE-2004-0369

JSON object : View

Products Affected

symantec

gateway_security_5300
enterprise_firewall
gateway_security_5400
velociraptor

entrust

entrust_libkmp_isakmp_library

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://xforce.iss.net/xforce/alerts/id/181", "name": "20040826 Entrust LibKmp Library Buffer Overflow", "tags": ["Patch", "Vendor Advisory"], "refsource": "ISS"}, {"url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html", "name": "http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.auscert.org.au/render.html?it=4339", "name": "ESB-2004.0538", "tags": ["Vendor Advisory"], "refsource": "AUSCERT"}, {"url": "http://www.ciac.org/ciac/bulletins/o-206.shtml", "name": "O-206", "tags": ["Vendor Advisory"], "refsource": "CIAC"}, {"url": "http://www.securityfocus.com/bid/11039", "name": "11039", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15669", "name": "isakmp-spi-size-bo(15669)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0369", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2004-12-31T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:symantec:velociraptor:1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:windows_2000_nt:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:entrust:entrust_libkmp_isakmp_library:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:solaris:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:solaris:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:windows_2000_nt:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:symantec:gateway_security_5300:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:symantec:gateway_security_5400:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:30Z"}