CVE-2004-0375
Medium
Description
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
SeverityMedium
CVSS5.0
Exploit probability95. percentile8.8%
ProductSymantec Client Firewall
PublishedAug 18, 2004
First seenAug 18, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client_firewall | 5.01, 5.1.1 | — |
| symantec client_security | 1.0, 1.1 | — |
| symantec norton_internet_security | 2003, 2004 | — |
| symantec norton_personal_firewall | 2003, 2004 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.