Symantec Firewall NBNS Response Heap Corruption Vulnerability (CVE-2004-0444)

Vulnerability Key Information Vulnerability Name: Multiple Symantec Firewall Products Contain Heap Corruption Vulnerability When Processing NBNS Response Packets Vulnerability ID: VU#294998 Release Date: 2004-05-13 Revision Date: 2004-05-13 CVE ID: CVE-2004-0444 Affected Products: - Consumer: Symantec Norton Internet Security and Professional 2002, 2003, 2004; Symantec Norton Personal Firewall 2002, 2003, 2004; Symantec Norton AntiSpam 2004 - Corporate: Symantec Client Firewall 5.01, 5.1.1; Symantec Client Security 1.0, 1.1, 2.0 (SCF 7.1) Impact: Unauthorized remote attackers may cause a denial of service or execute arbitrary code with kernel privileges on vulnerable systems. According to eEye Digital Security, exploitation of this vulnerability requires the firewall to be configured to allow NetBIOS Name Service (NBNS) traffic. Remediation: - Apply Patches: For enterprise versions, it is recommended to apply patches through appropriate support channels. - Use LiveUpdate: For consumer versions, it is recommended to use the LiveUpdate feature to ensure all updates are installed. CVSS Score: 15.54 Reporter: eEye Digital Security References: - http://www.eeye.com/html/Research/Advisories/AD20040512C.html - http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html - http://secunia.com/advisories/11066/ Vendor: Symantec Corporation

Goal Reached Thanks to every supporter — we hit 100%!

Symantec Firewall NBNS Response Heap Corruption Vulnerability (CVE-2004-0444)