Remote Information Disclosure in Symantec Firewall and VPN Appliances

CVE-2004-1473

Summary

Certain Symantec Enterprise Firewall and VPN appliances are vulnerable to remote information disclosure. Attackers can exploit this vulnerability by performing a UDP port scan using a source port of UDP 53, which allows them to bypass filtering mechanisms. This enables unauthorized users to discover whether the devices are actively running services such as tftpd, snmpd, or isakmp, exposing them to further targeted attacks. It is crucial for organizations using the affected versions to implement necessary security measures to mitigate risks.

References