Vulnerability in Symantec Enterprise Firewall
CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.038 (89.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 89.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.038 · newest: 0.038 · change: 0.000
Affected products
- Symantec Enterprise Firewall — versions 8.0
- Symantec Firewall Vpn Appliance 100
- Symantec Firewall Vpn Appliance 200
- Symantec Gateway Security 300 — versions 2.0
- Symantec Gateway Security 400 — versions 2.0
- Symantec Gateway Security 5000 Series — versions 3.0
- Symantec Gateway Security 5100
- Symantec Gateway Security 5300 — versions 1.0
- Symantec Gateway Security 5310 — versions 1.0
- Symantec Gateway Security 5400 — versions 2.0.1
References
- securitytracker.com/id (Patch, vdb-entry)
- secunia.com/advisories/17684 (Patch, Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2005/2517 (vdb-entry)
- securitytracker.com/id (Patch, vdb-entry)
- securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html (Patch, Vendor Advisory)
- securitytracker.com/id (Patch, vdb-entry)