vulnwire
2.6low

CVE-2004-04451 exploit

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004,…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
2.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
11.0%
percentile 96%
Public exploits
1
Exploit-DB

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Exploit prediction (EPSS)

11.05% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-299 Symantec Multiple Firewall - DNS Response Denial of Service · dos · 2004-05-16

CVSS scores

Assigned byVersionScoreVector
NVD2.02.6AV:N/AC:H/Au:N/C:N/I:N/A:P

References

  • securitytracker.com /id?1010146 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securitytracker.com /id?1010145 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • ciac.org /ciac/bulletins/o-141.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • kb.cert.org /vuls/id/682110 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • osvdb.org /6100 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16132 · vdb-entry, x_refsource_XF, x_transferred
  • securityresponse.symantec.com /avcenter/security/Content/2004.05.12.html · x_refsource_CONFIRM, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2004-May/021359.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securitytracker.com /id?1010144 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/11066 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/10336 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.