Vulnerabilities > CVE-2004-1474 - Unspecified vulnerability in Symantec products

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

symantec

nessus

NVD

Published: 2004-12-31

Updated: 2024-11-20

Summary

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.

Vulnerable Configurations

Part	Description	Count
Hardware	Symantec Symantec Gateway Security 360 * Symantec Firewall VPN Appliance 200 * Symantec Nexland Wavebase Firewall Appliance * Symantec Gateway Security 320 * Symantec Nexland Pro400 Firewall Appliance * Symantec Gateway Security 360R * Symantec Nexland Pro800Turbo Firewall Appliance * Symantec Firewall VPN Appliance 100 * Symantec Nexland Pro800 Firewall Appliance * Symantec Firewall VPN Appliance 200R * Symantec Nexland ISB Soho Firewall Appliance * Symantec Nexland Pro100 Firewall Appliance *	12

Nessus

NASL family	SNMP
NASL id	SNMP_DEFAULT_COMMUNITIES.NASL
description	It is possible to obtain the default community names of the remote SNMP server. An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system (if the default community allows such modifications).
last seen	2020-06-01
modified	2020-06-02
plugin id	10264
published	2002-11-25
reporter	This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/10264
title	SNMP Agent Default Community Names

Summary

Vulnerable Configurations

Nessus

References