CVE-2004-0369

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Affected products

Entrust Libkmp Isakmp Library: all versions
Symantec Enterprise Firewall: 7.0, 7.0.4, 8.0
Symantec Gateway Security 5300: 1.0
Symantec Gateway Security 5400: 2.0
Symantec Velociraptor: 1.5

References

http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
http://www.auscert.org.au/render.html?it=4339
http://www.ciac.org/ciac/bulletins/o-206.shtml
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html
http://www.auscert.org.au/render.html?it=4339
http://www.ciac.org/ciac/bulletins/o-206.shtml
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Get alerted when CVE-2004-0369 or the next vulnerability affects your stack