Vulnerabilities > CVE-2006-4562 - Unspecified vulnerability in Symantec Gateway Security

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

symantec

NVD

Published: 2006-09-06

Updated: 2024-11-21

Summary

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

Vulnerable Configurations

Part	Description	Count
Hardware	Symantec Symantec Gateway Security 5310_1.0 Symantec Gateway Security 5400_2.0.1 Symantec Gateway Security 5110 Symantec Gateway Security 5200_1.0 Symantec Gateway Security 360 Symantec Gateway Security 5300 Symantec Gateway Security 320 Symantec Gateway Security 360R Symantec Gateway Security 1.0 Symantec Gateway Security 5400_2.0 Symantec Gateway Security 5000_Series_2.0.1 Symantec Gateway Security 5000_Series_3.0 Symantec Gateway Security 5200 Symantec Gateway Security 5300_1.0 Symantec Gateway Security 5110_1.0	15

Summary

Vulnerable Configurations

References