CVE-2004-0369

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.htmlVendor Advisory
http://www.auscert.org.au/render.html?it=4339Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtmlVendor Advisory
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.htmlVendor Advisory
http://www.auscert.org.au/render.html?it=4339Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtmlVendor Advisory
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-03702.1The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, w CVE-2004-03715.0Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allow CVE-2004-03722.1xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport CVE-2004-03746.4Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information CVE-2004-03755.0SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and CVE-2004-03765.0oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.CVE-2004-037710.0Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote at CVE-2004-03796.8Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary w CVE-2004-038010.0The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restr CVE-2004-03812.1mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.CVE-2004-03827.2Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configur CVE-2004-03837.2Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."