CVSS: 10.0EPSS: 92%CPEs: 23EXPL: 0CVE-2004-0444
https://notcve.org/view.php?id=CVE-2004-0444
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components. Múltiples vulenrabilidades en SYMDNS.SYS de Symantec Noton Internet Security y Professional 2002 a 2004, Norton Persnoal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewal 5.01 y 5.1.1, y Client Security 1.0 a 2.0 permite a atacantes remotos causar una denegación de servicio o ejecutar código de su elección mediante (1) un byte de longitud manipulado en la rutina de decodificación de primer nivel del Servicio de Nombres de NetBIOS (NBNS) que modifica una variable de índice que conduce a un desbordamiento de búfer en la pila, (2) un problema de corrupción del montón en una respuesta NBNS a la que le faltan ciertos campor RR, y (3) un desbordamiento de búfer basado en la pila en el componente DNS mediante un Registro de Recurso (RR) con un nombre canónico (CNAME) largo compuest de muchos componentes más pequeños. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html http://secunia.com/advisories/11066 http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html http://securitytracker.com/id?1010144 http://securitytracker.com/id?1010145 http://securitytracker.com/id?1010146 http://www.ciac.org/ciac/bulletins/o-141. •
CVSS: 5.0EPSS: 1%CPEs: 10EXPL: 2CVE-2004-0375 – Symantec Client Firewall Products 5 - 'SYMNDIS.SYS' Driver Remote Denial of Service
https://notcve.org/view.php?id=CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero. SIMNDIS.SYS en Symantec Norton Internet Securiy 2003 y 2004, Norton Personal Firewall 2003 y 2004, Client Firewall 5.01 y 5.1.1, y Client Security 1.0 y 1.1 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante un paquete TCP con (1) opción SACK o (2) opción Suma de Comprobación de Datos Alternativa seguida por una longitud cero. • https://www.exploit-db.com/exploits/23846 http://marc.info/?l=bugtraq&m=108275582432246&w=2 http://securitytracker.com/id?1009379 http://securitytracker.com/id?1009380 http://www.eeye.com/html/Research/Upcoming/20040309.html http://www.securityfocus.com/bid/9912 http://www.symantec.com/avcenter/security/Content/2004.04.20.html https://exchange.xforce.ibmcloud.com/vulnerabilities/15433 https://exchange.xforce.ibmcloud.com/vulnerabilities/15936 •
CVSS: 4.3EPSS: 1%CPEs: 1EXPL: 2CVE-2002-2336 – Symantec Norton Personal Firewall 2002/Kaspersky Labs Anti-Hacker 1.0/BlackIce Server Protection 3.5/BlackICE Defender 2.9 - Auto Block Denial of Service
https://notcve.org/view.php?id=CVE-2002-2336
Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. • https://www.exploit-db.com/exploits/21915 http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html http://online.securityfocus.com/archive/1/294411 http://www.iss.net/security_center/static/10314.php http://www.securityfocus.com/bid/5917 • CWE-16: Configuration •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2002-1779
https://notcve.org/view.php?id=CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305). • http://online.securityfocus.com/archive/1/267850 http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html http://www.securityfocus.com/bid/4545 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2002-1778
https://notcve.org/view.php?id=CVE-2002-1778
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan. • http://online.securityfocus.com/archive/1/267850 http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html http://www.securityfocus.com/bid/4521 https://exchange.xforce.ibmcloud.com/vulnerabilities/8859 •