Symantec

Gateway Security 5400

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2007-0447

  • EPSS 10.84%
  • Veröffentlicht 05.10.2007 21:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

9.3

CVE-2007-3699

  • EPSS 2.38%
  • Veröffentlicht 05.10.2007 21:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

7.5

CVE-2005-3768

  • EPSS 4%
  • Veröffentlicht 23.11.2005 00:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of servi...

5

CVE-2005-0817

  • EPSS 0.74%
  • Veröffentlicht 02.05.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicio...

9.3

CVE-2004-1029

  • EPSS 42.56%
  • Veröffentlicht 01.03.2005 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load un...

7.5

CVE-2004-0369

  • EPSS 8.5%
  • Veröffentlicht 31.12.2004 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISA...

6.8

CVE-2004-0192

Exploit
  • EPSS 0.53%
  • Veröffentlicht 15.03.2004 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the r...