ISAKMP Buffer Overflow vulnerability in Entrust LibKMP ISAKMP Library

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

entrust

symantec

NVD

Published: 2004-12-31

Updated: 2017-07-11

Summary

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Vulnerable Configurations

Part	Description	Count
Application	Entrust Entrust Entrust Libkmp Isakmp Library *	1
Application	Symantec Symantec Enterprise Firewall 7.0 Symantec Enterprise Firewall 7.0.4 Symantec Enterprise Firewall 8.0 Symantec Velociraptor 1.5	6
Hardware	Symantec Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5400 2.0	2

References

http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
http://www.auscert.org.au/render.html?it=4339
http://www.ciac.org/ciac/bulletins/o-206.shtml
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669