Arbitrary DNS Query Vulnerability in Symantec Gateway Security
CVE-2006-4562

Currently unrated

Key Information:

Vendor
Symantec
Status
Gateway Security
Vendor
CVE Published:
6 September 2006

Summary

The proxy DNS service in Symantec Gateway Security enables remote attackers to perform arbitrary DNS queries against third-party DNS servers while concealing their actual IP address. This configuration flaw poses a significant security risk by allowing malicious activities to go undetected. Note: the default setup may not proxy DNS queries received on the external interface, potentially limiting exposure.

References

http://www.securityfocus.com/archive/1/444114/100/100/thr...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/444134/100/100/thr...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/444330/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.