CVE Vulnerabilities

CVE-2006-4562

Published: Sep 06, 2006 | Modified: May 17, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

Affected Software

Name Vendor Start Version End Version
Gateway_security Symantec 1.0 (including) 1.0 (including)
Gateway_security Symantec 320 (including) 320 (including)
Gateway_security Symantec 360 (including) 360 (including)
Gateway_security Symantec 360r (including) 360r (including)
Gateway_security Symantec 5000_series_2.0.1 (including) 5000_series_2.0.1 (including)
Gateway_security Symantec 5000_series_3.0 (including) 5000_series_3.0 (including)
Gateway_security Symantec 5110 (including) 5110 (including)
Gateway_security Symantec 5110_1.0 (including) 5110_1.0 (including)
Gateway_security Symantec 5200 (including) 5200 (including)
Gateway_security Symantec 5200_1.0 (including) 5200_1.0 (including)
Gateway_security Symantec 5300 (including) 5300 (including)
Gateway_security Symantec 5300_1.0 (including) 5300_1.0 (including)
Gateway_security Symantec 5310_1.0 (including) 5310_1.0 (including)
Gateway_security Symantec 5400_2.0 (including) 5400_2.0 (including)
Gateway_security Symantec 5400_2.0.1 (including) 5400_2.0.1 (including)

References