CVE-2004-0445

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 11%

from disclosure to weapon0 days

Published on NVDMay 20

1st PoCMay 16

exploitation probability

11%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/299

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html http://secunia.com/advisories/11066 http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html http://securitytracker.com/id?1010144 http://securitytracker.com/id?1010145 http://securitytracker.com/id?1010146 https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 http://www.ciac.org/ciac/bulletins/o-141.shtml http://www.kb.cert.org/vuls/id/682110 http://www.osvdb.org/6100 http://www.securityfocus.com/bid/10336