Signature Detail
Short Name |
DNS:SYMNTC-FIREWALL-MULT |
|---|---|
Severity |
High |
Recommended |
No |
Category |
DNS |
Keywords |
Symantec Firewall Multiple Vulnerabilities |
Release Date |
2015/09/02 |
Update Number |
2532 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DNS: Symantec Firewall Multiple Vulnerabilities
Multiple vulnerabilities exist in the Symantec Enterprise Firewall/VPN Appliance and Symantec Gateway Security products. These products contain firmware flaws which result in improper enforcement of controls relative to incoming UDP traffic. These vulnerabilities enable an attacker to view and modify the firewall rules, and additionally to create a denial of service condition. The target system will not exhibit any unusual behaviour when the vulnerability is exploited for information disclosure. If these vulnerabilities are exploited to alter the configuration of the vulnerable system, this will result in a behavior change dependent on the new configuration settings. Alternatively, in the case of the denial-of-service attack previously described, the target system will become unresponsive until restarted.
References
- CVE: CVE-2004-0369