CVE-2006-4562

Published: Sep 6, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

Affected (15)

Products: Symantec: Gateway Security

Symantec

1 product

Gateway Security

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Symantec Gateway Security	Version 1.0
Symantec Gateway Security	Version 320
Symantec Gateway Security	Version 360
Symantec Gateway Security	Version 360r
Symantec Gateway Security	Version 5000_series_2.0.1
Symantec Gateway Security	Version 5000_series_3.0
Symantec Gateway Security	Version 5110
Symantec Gateway Security	Version 5110_1.0
Symantec Gateway Security	Version 5200
Symantec Gateway Security	Version 5200_1.0
Symantec Gateway Security	Version 5300
Symantec Gateway Security	Version 5300_1.0
Symantec Gateway Security	Version 5310_1.0
Symantec Gateway Security	Version 5400_2.0.1
Symantec Gateway Security	Version 5400_2.0