CVE-2004-1754

Published: Jun 15, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.

Affected (11)

Products: Symantec: Enterprise Firewall, Gateway Security

Symantec

2 products

Enterprise Firewall

Gateway Security

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Symantec Enterprise Firewall	Version 7.0.4
Symantec Enterprise Firewall	Version 7.0.4
Symantec Enterprise Firewall	Version 8.0
Symantec Enterprise Firewall	Version 8.0
Symantec Enterprise Firewall	Version 8.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Symantec Gateway Security	Version 5110_1.0
Symantec Gateway Security	Version 5200_1.0
Symantec Gateway Security	Version 5300_1.0
Symantec Gateway Security	Version 5310_1.0
Symantec Gateway Security	Version 5400_2.0.1
Symantec Gateway Security	Version 5400_2.0