Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=109588376426070&w=2 | |
| http://secunia.com/advisories/12635 | |
| http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html | Patch Vendor Advisory |
| http://www.kb.cert.org/vuls/id/173910 | Patch Third Party Advisory US Government Resource |
| http://www.osvdb.org/10206 | |
| http://www.securityfocus.com/bid/11237 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 | |
| http://marc.info/?l=bugtraq&m=109588376426070&w=2 | |
| http://secunia.com/advisories/12635 | |
| http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html | Patch Vendor Advisory |
| http://www.kb.cert.org/vuls/id/173910 | Patch Third Party Advisory US Government Resource |
| http://www.osvdb.org/10206 | |
| http://www.securityfocus.com/bid/11237 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=109588376426070&w=2 - | |
| References | () http://secunia.com/advisories/12635 - | |
| References | () http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html - Patch, Vendor Advisory | |
| References | () http://www.kb.cert.org/vuls/id/173910 - Patch, Third Party Advisory, US Government Resource | |
| References | () http://www.osvdb.org/10206 - | |
| References | () http://www.securityfocus.com/bid/11237 - Patch | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 - |
Information
Published : 2004-12-31 05:00
Updated : 2024-11-20 23:50
NVD link : CVE-2004-1474
Mitre link : CVE-2004-1474
CVE.ORG link : CVE-2004-1474
JSON object : View
Products Affected
symantec
- nexland_wavebase_firewall_appliance
- firewall_vpn_appliance_200
- gateway_security_360r
- nexland_pro400_firewall_appliance
- gateway_security_320
- nexland_pro800_firewall_appliance
- firewall_vpn_appliance_100
- gateway_security_360
- nexland_pro100_firewall_appliance
- firewall_vpn_appliance_200r
- nexland_pro800turbo_firewall_appliance
- nexland_isb_soho_firewall_appliance
CWE