5.0med
CVE-2004-03751 exploit
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
8.8%
percentile 95%
Public exploits
1
Exploit-DB
Summary
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
Exploit prediction (EPSS)
8.83% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.
Exploits and detections
- EDB-23846 Symantec Client Firewall Products 5 - 'SYMNDIS.SYS' Driver Remote Denial of Service · dos · 2004-03-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
- securitytracker.com /id?1009379 · vdb-entry, x_refsource_SECTRACK, x_transferred
- symantec.com /avcenter/security/Content/2004.04.20.html · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id?1009380 · vdb-entry, x_refsource_SECTRACK, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/15433 · vdb-entry, x_refsource_XF, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/15936 · vdb-entry, x_refsource_XF, x_transferred
- eeye.com /html/Research/Upcoming/20040309.html · x_refsource_MISC, x_transferred
- marc.info /?l=bugtraq&m=108275582432246&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/9912 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-0375
- NVD: CVE-2004-0375
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.