CVE-2004-0444
Estado: ModificadaAlta (10)—
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 13%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- NVD-CWE-Other
Referencias
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/294998
- http://www.kb.cert.org/vuls/id/634414
- http://www.kb.cert.org/vuls/id/637318
- http://www.osvdb.org/6099
- http://www.osvdb.org/6101
- http://www.osvdb.org/6102
- http://www.securityfocus.com/bid/10333
- http://www.securityfocus.com/bid/10334
- http://www.securityfocus.com/bid/10335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16134
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16137
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/294998
- http://www.kb.cert.org/vuls/id/634414
- http://www.kb.cert.org/vuls/id/637318
- http://www.osvdb.org/6099
- http://www.osvdb.org/6101
- http://www.osvdb.org/6102
- http://www.securityfocus.com/bid/10333
- http://www.securityfocus.com/bid/10334
- http://www.securityfocus.com/bid/10335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16134
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16137
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-0444",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-07-07T04:00:00.000",
"references": [
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/11066",
"source": "cve@mitre.org"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010144",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010145",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1010146",
"source": "cve@mitre.org"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-141.shtml",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/294998",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/634414",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/637318",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/6099",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/6101",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/6102",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10333",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10334",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10335",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16134",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16135",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16137",
"source": "cve@mitre.org"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/11066",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010144",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010145",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1010146",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-141.shtml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/294998",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/634414",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/637318",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/6099",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/6101",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/6102",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10333",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10334",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10335",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16134",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16135",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16137",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components."
},
{
"lang": "es",
"value": "Múltiples vulenrabilidades en SYMDNS.SYS de Symantec Noton Internet Security y Professional 2002 a 2004, Norton Persnoal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewal 5.01 y 5.1.1, y Client Security 1.0 a 2.0 permite a atacantes remotos causar una denegación de servicio o ejecutar código de su elección mediante \r\n(1) un byte de longitud manipulado en la rutina de decodificación de primer nivel del Servicio de Nombres de NetBIOS (NBNS) que modifica una variable de índice que conduce a un desbordamiento de búfer en la pila,\r\n(2) un problema de corrupción del montón en una respuesta NBNS a la que le faltan ciertos campor RR, y \r\n(3) un desbordamiento de búfer basado en la pila en el componente DNS mediante un Registro de Recurso (RR) con un nombre canónico (CNAME) largo compuest de muchos componentes más pequeños."
}
],
"lastModified": "2026-06-16T22:05:38.813",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AEFBAEB-18D4-4082-9F19-C47113841C89"
},
{
"criteria": "cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EA9657C-14D2-418A-AABD-96392E87F4B8"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1DFD4CB-40A1-4D70-97AC-0941826F28CF"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "102D0C6A-31B8-4275-A805-4CA446D1C77F"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA18147D-E618-4902-8837-5824240DD50E"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75D357CC-EAD0-42E3-B38C-BE2DC44D154E"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "201403B4-3B5C-4F77-ADAE-7A553D4D58F1"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8D19926-AB65-4C06-8C44-7EA9B070FD1D"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F27E94F-F6D6-4C40-878F-BF952658A909"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AA71038-2D4E-4366-A3D1-AD85251B3E5F"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC689F12-84C6-4B52-970F-DAF6B00B4A42"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA28BC22-ABF0-4F1E-BA83-85B398775450"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5FA0458-AB41-495E-B41F-C18B4E6876CB"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "898D5369-E2F3-450C-8554-1C692EAA9906"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74E5CAF7-C305-4FAF-8DA7-627D83F65185"
},
{
"criteria": "cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}