CVE-2004-0445
Estado: ModificadaBaja (2.6)—
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
- Puntuación base: 2.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 11%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- NVD-CWE-Other
Referencias
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/682110
- http://www.osvdb.org/6100
- http://www.securityfocus.com/bid/10336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/682110
- http://www.osvdb.org/6100
- http://www.securityfocus.com/bid/10336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-0445",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-07-07T04:00:00.000",
"references": [
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/11066",
"source": "cve@mitre.org"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010144",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010145",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010146",
"source": "cve@mitre.org"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-141.shtml",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/682110",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/6100",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10336",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16132",
"source": "cve@mitre.org"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/11066",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010144",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010145",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010146",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-141.shtml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/682110",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/6100",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10336",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16132",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself."
},
{
"lang": "es",
"value": "El controlador SYMDNS.SYS de Symantec Norton Internet Security y Professional 2002 a 2004, Norton Personal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewall 5.01 y 5.1.1, Client Securiy 1.0 a 2.0 permite a atacantes remotos causar una denegación de servicio (consumición de CPU en un buble infinito) mediante una respuesta DNS con un puntero de nombre comprimido que apunta a sí mismo."
}
],
"lastModified": "2026-06-16T22:05:39.010",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AEFBAEB-18D4-4082-9F19-C47113841C89"
},
{
"criteria": "cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EA9657C-14D2-418A-AABD-96392E87F4B8"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1DFD4CB-40A1-4D70-97AC-0941826F28CF"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "102D0C6A-31B8-4275-A805-4CA446D1C77F"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA18147D-E618-4902-8837-5824240DD50E"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75D357CC-EAD0-42E3-B38C-BE2DC44D154E"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "201403B4-3B5C-4F77-ADAE-7A553D4D58F1"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8D19926-AB65-4C06-8C44-7EA9B070FD1D"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F27E94F-F6D6-4C40-878F-BF952658A909"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AA71038-2D4E-4366-A3D1-AD85251B3E5F"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC689F12-84C6-4B52-970F-DAF6B00B4A42"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA28BC22-ABF0-4F1E-BA83-85B398775450"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5FA0458-AB41-495E-B41F-C18B4E6876CB"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "898D5369-E2F3-450C-8554-1C692EAA9906"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74E5CAF7-C305-4FAF-8DA7-627D83F65185"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}