Initial Publication Date: Advisory Status: Advisory Severity: CVSS Base Score:Legacy ID
20 Apr 2004 Closed Medium 5.0 SYM04-007
Summary
eEye Digital Security notified Symantec Corporation of a severe Denial of Service vulnerability they discovered in the Symantec Client Firewall products for Windows. By properly exploiting this issue, an attacker could render the targeted system inoperable.
Affected Products
Affected Components Consumer:
Symantec Norton Internet Security and Professional 2003, 2004
Symantec Norton Personal Firewall 2003, 2004 Corporate:
Symantec Client Firewall 5.01, 5.1.1
Symantec Client Security 1.0 and 1.1
Issues
Details
eEye Digital Security notified Symantec of a Denial of Service vulnerability they found during product testing against Symantec's client firewall applications. By directing a specifically formatted TCP attack against a target system running a vulnerable Symantec application, an attacker can cause a complete system halt. As a result, the targeted system would require a system reboot to clear the problem.
The Common Vulnerabilities and Exposures (CVE) initiative has assigned Candidate CAN-2004-0375 to this issue.
This is a candidate for inclusion in the CVE list (http://cve.mitre.org), which standardizes names for security problems
Mitigation
Symantec Response
Symantec confirmed the vulnerability reported by eEye Digital Security. Symantec product engineers have developed fixes for the issue and released patches for all impacted products through Symantec LiveUpdate and technical support channels.
Clients using retail versions of Symantec Norton Internet Security and Symantec Norton Personal Firewall who regularly run Symantec LiveUpdate should already be protected against this issue. However, to be sure they are fully protected, customers should run Symantec LiveUpdate manually to ensure all available updates are installed.
Open any installed Symantec product
Click on LiveUpdate in the toolbar
Run LiveUpdate until Symantec LiveUpdate indicated that all installed Symantec products are up-to-date
Clients running corporate versions of Symantec Client Firewall or Symantec Client Security should download and apply patches obtained through their appropriate support channels.
Symantec is not aware of any active attempts against or customer impact from this issue.
Acknowledgements
Symantec appreciates the cooperation of the eEye Digital Security research team in identifying this issue
Legacy ID
SYM04-007
Terms of use for this information are found in Legal Notices.
Translated Content
This is machine translated content
Login to Subscribe
Please login to set up your
subscription.
Would you like to be subscribed to future notifications for this article?
For security reasons, your link to this document has expired. Please click on the attachment link to access this file.
The attachment that you are looking for no longer exists.
There has been an issue retrieving your attachment. Please try again.