symantec enterprise firewall 8.0 vulnerabilities and exploits

(subscribe to this query)

Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote malicious users to poison the DNS cache and redirect users to malicious sites.

Symantec Velociraptor Model 1300 Symantec Enterprise Firewall 7.0 Symantec Enterprise Firewall 8.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5400 2.0

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 up to and including 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote malicious users to execute arbitrary code via a crafted ISAKMP payload.

Symantec Velociraptor 1.5 Symantec Enterprise Firewall 7.0.4 Symantec Enterprise Firewall 7.0 Entrust Entrust Libkmp Isakmp Library Symantec Enterprise Firewall 8.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5400 2.0

The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote malicious users to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.

Symantec Enterprise Firewall 8.0 Symantec Enterprise Firewall 7.0.4 Symantec Gateway Security 5200 1.0 Symantec Gateway Security 5310 1.0 Symantec Gateway Security 5400 2.0.1 Symantec Gateway Security 5110 1.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5400 2.0

1 EDB exploit

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote malicious users to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separ...

Symantec Gateway Security 2.0.1 Symantec Gateway Security 3.0 Symantec Enterprise Firewall 8.0 Symantec Gateway Security 5000 Series 2.0.1 Symantec Gateway Security 5000 Series 3.0

1 EDB exploit

Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote malicious users to cause a denial of service and possibly execute ...

Symantec Enterprise Firewall 8.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5310 1.0 Symantec Firewall Vpn Appliance 100 Symantec Gateway Security 5400 2.0.1 Symantec Firewall Vpn Appliance 200 Symantec Gateway Security 300 2.0 Symantec Gateway Security 400 2.0 Symantec Gateway Security 5000 Series 3.0 Symantec Gateway Security 5100

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook