NetSight
low2.6Public exploit code

CVE-2004-0445

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Affected products

VendorProductAffected versions
SymantecClient Firewall
Versions 5.01, 5.1.1
SymantecClient Security
Versions 1.0, 1.1, 1.2, 1.3, 1.4, 1.5
SymantecNorton Antispam
Version 2004
SymantecNorton Internet Security
Versions 2002, 2003, 2004
SymantecNorton Personal Firewall
Versions 2002, 2003, 2004

References