Unscored severity · published Dec 31, 2004
CVE-2004-0369
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Enterprise Firewall · Symantec
7.0; 7.0.4; 7.0.4; 8.0; 8.0 · source: NVD
EL
Entrust Libkmp Isakmp Library · Entrust
All versions, or not specified · source: NVD
GS
Gateway Security 5300 · Symantec
1.0 · source: NVD
GS
Gateway Security 5400 · Symantec
2.0 · source: NVD
VE
Velociraptor · Symantec
1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0369
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0369
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
Vendor Advisory
http://www.auscert.org.au/render.html?it=4339
Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/11039
Patch
http://xforce.iss.net/xforce/alerts/id/181
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669