CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2004-12-31
- Last modified
- 2024-08-08
Affected products
- Firewall Vpn Appliance 100 (Symantec)
- Firewall Vpn Appliance 200 (Symantec)
- Firewall Vpn Appliance 200r (Symantec)
- Gateway Security 320 (Symantec)
- Gateway Security 360 (Symantec)
- Gateway Security 360r (Symantec)
- Nexland Isb Soho Firewall Appliance (Symantec)
- Nexland Pro100 Firewall Appliance (Symantec)
- Nexland Pro400 Firewall Appliance (Symantec)
- Nexland Pro800 Firewall Appliance (Symantec)
- Nexland Pro800turbo Firewall Appliance (Symantec)
- Nexland Wavebase Firewall Appliance (Symantec)
References
- http://marc.info/?l=bugtraq&m=109588376426070&w=2
- http://secunia.com/advisories/12635
- http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
- http://www.kb.cert.org/vuls/id/173910
- http://www.osvdb.org/10206
- http://www.securityfocus.com/bid/11237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17471
