CVE-2004-1754

The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.

Published: Jun 15, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-1754
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
symantec / enterprise_firewall	8.0	8.0.x
symantec / enterprise_firewall	7.0.4	7.0.4.x
symantec / gateway_security	5310_1.0	5310_1.0.x
symantec / gateway_security	5400_2.0.1	5400_2.0.1.x
symantec / gateway_security	5200_1.0	5200_1.0.x
symantec / gateway_security	5400_2.0	5400_2.0.x
symantec / gateway_security	5300_1.0	5300_1.0.x
symantec / gateway_security	5110_1.0	5110_1.0.x

http://lists.virus.org/bugtraq-0406/msg00234.html
http://secunia.com/advisories/11888
http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html
http://www.securityfocus.com/bid/10557

Vulnerability Database

CVE-2004-1754

Deep Security Visibility Without the Complexity