Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0445

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Published

2004-07-07T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 2.6 (LOW)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

4.9

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	client_firewall	5.01	Yes
Application	symantec	client_firewall	5.1.1	Yes
Application	symantec	client_security	1.0	Yes
Application	symantec	client_security	1.1	Yes
Application	symantec	client_security	1.2	Yes
Application	symantec	client_security	1.3	Yes
Application	symantec	client_security	1.4	Yes
Application	symantec	client_security	1.5	Yes
Application	symantec	client_security	1.6	Yes
Application	symantec	client_security	1.7	Yes
Application	symantec	client_security	1.8	Yes
Application	symantec	client_security	1.9	Yes
Application	symantec	client_security	2.0	Yes
Application	symantec	norton_antispam	2004	Yes
Application	symantec	norton_internet_security	2002	Yes
Application	symantec	norton_internet_security	2002	Yes
Application	symantec	norton_internet_security	2003	Yes
Application	symantec	norton_internet_security	2003	Yes
Application	symantec	norton_internet_security	2004	Yes
Application	symantec	norton_internet_security	2004	Yes
Application	symantec	norton_personal_firewall	2002	Yes
Application	symantec	norton_personal_firewall	2003	Yes
Application	symantec	norton_personal_firewall	2004	Yes

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html ([email protected])
http://secunia.com/advisories/11066 ([email protected])
http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html Patch, Vendor Advisory ([email protected])
http://securitytracker.com/id?1010144 ([email protected])
http://securitytracker.com/id?1010145 ([email protected])
http://securitytracker.com/id?1010146 ([email protected])
http://www.ciac.org/ciac/bulletins/o-141.shtml ([email protected])
http://www.kb.cert.org/vuls/id/682110 Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.osvdb.org/6100 ([email protected])
http://www.securityfocus.com/bid/10336 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/11066 (af854a3a-2127-422b-91ae-364da2661108)
http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1010144 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1010145 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1010146 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ciac.org/ciac/bulletins/o-141.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/682110 Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/6100 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/10336 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 (af854a3a-2127-422b-91ae-364da2661108)