CVE-2004-0369

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Published: Dec 31, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-0369
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
entrust / entrust_libkmp_isakmp_library	-	-
symantec / enterprise_firewall	8.0	8.0.x
symantec / enterprise_firewall	7.0.4	7.0.4.x
symantec / enterprise_firewall	7.0	7.0.x
symantec / velociraptor	1.5	1.5.x
symantec / gateway_security_5400	2.0	2.0.x
symantec / gateway_security_5300	1.0	1.0.x

http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
http://www.auscert.org.au/render.html?it=4339
http://www.ciac.org/ciac/bulletins/o-206.shtml
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Vulnerability Database

289,599

CVE-2004-0369