CVE-2004-1473 : Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

Published 2004-12-31 05:00:00

Updated 2017-07-11 01:31:04

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2004-1473

Symantec » Firewall Vpn Appliance 100
cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*
Matching versions
Symantec » Firewall Vpn Appliance 200
cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*
Matching versions
Symantec » Firewall Vpn Appliance 200r
cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Isb Soho Firewall Appliance
cpe:2.3:h:symantec:nexland_isb_soho_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Pro100 Firewall Appliance
cpe:2.3:h:symantec:nexland_pro100_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Pro400 Firewall Appliance
cpe:2.3:h:symantec:nexland_pro400_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Pro800 Firewall Appliance
cpe:2.3:h:symantec:nexland_pro800_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Pro800turbo Firewall Appliance
cpe:2.3:h:symantec:nexland_pro800turbo_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Nexland Wavebase Firewall Appliance
cpe:2.3:h:symantec:nexland_wavebase_firewall_appliance:*:*:*:*:*:*:*:*
Matching versions
Symantec » Gateway Security 320
cpe:2.3:h:symantec:gateway_security_320:*:*:*:*:*:*:*:*
Matching versions
Symantec » Gateway Security 360
cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*
Matching versions
Symantec » Gateway Security 360r
cpe:2.3:h:symantec:gateway_security_360r:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-1473

EPSS FAQ

0.49%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-1473

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2004-1473

http://www.kb.cert.org/vuls/id/329230

Patch;Third Party Advisory;US Government Resource
http://www.securityfocus.com/bid/11237

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/17470
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html

Patch;Vendor Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=109588376426070&w=2

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2004-1473

Products affected by CVE-2004-1473

Exploit prediction scoring system (EPSS) score for CVE-2004-1473

CVSS scores for CVE-2004-1473

References for CVE-2004-1473