CVE-2004-0444

Description

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 58.00% Top 5%

Third-Party Advisory cert.org Third-Party Advisory cert.org Third-Party Advisory ciac.org Third-Party Advisory cert.org Third-Party Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://www.osvdb.org/6099	vdb entry
http://www.kb.cert.org/vuls/id/634414	patch third party advisory us government resource
http://securitytracker.com/id?1010146	vdb entry
http://securitytracker.com/id?1010145	vdb entry
http://www.kb.cert.org/vuls/id/637318	third party advisory us government resource
http://www.securityfocus.com/bid/10335	vdb entry
http://www.ciac.org/ciac/bulletins/o-141.shtml	third party advisory government resource
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html	mailing list
http://www.kb.cert.org/vuls/id/294998	patch third party advisory us government resource
http://www.securityfocus.com/bid/10333	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16134	vdb entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html	mailing list
http://www.osvdb.org/6101	vdb entry
http://www.osvdb.org/6102	vdb entry
http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/16137	vdb entry
http://securitytracker.com/id?1010144	vdb entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html	mailing list
http://www.securityfocus.com/bid/10334	vdb entry
http://secunia.com/advisories/11066	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16135	vdb entry

Frequently Asked Questions

What is the severity of CVE-2004-0444?: CVE-2004-0444 has been scored as a critical severity vulnerability.
How to fix CVE-2004-0444?: To fix CVE-2004-0444, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0444 being actively exploited in the wild?: It is possible that CVE-2004-0444 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~58% probability that this vulnerability will be exploited by malicious actors in the next 30 days.