Unscored severity · published Sep 6, 2006
CVE-2006-4562
The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Gateway Security · Symantec
1.0; 320; 360; 360r; 5000_series_2.0.1; 5000_series_3.0; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4562
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4562
www.securityfocus.com
http://www.securityfocus.com/archive/1/444114/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/444134/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/444135/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/444330/100/0/threaded
More from Gateway Security
–
CVE-2006-2341
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP…
–
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative…
–
CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port…
–
CVE-2004-1754
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains…
–
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily…