Symantec Firewall/VPN Appliance and Gateway Security has a default SNMP
| symantec-default-snmp (17471) |  Medium Risk |
Description:
Symantec Firewall/VPN Appliance hasa default "public" Simple Network Management Protocol (SNMP) community string. A remote attacker could use this vulnerability to obtain sensitive information and modify the device's configuration.
Consequences:
Gain Access
Remedy:
For Symantec Firewall/VPN Appliance:
Upgrade to the latest firmware build (1.63 or later), as listed in Symantec Security Response SYM04-013. See References.
For Symantec Gateway Security:
Upgrade to the latest firmware build (622 or later), as listed in Symantec Security Response SYM04-013. See References.
References:
- BugTraq Mailing List, Wed Sep 22 2004 - 13:50:12 CDT: Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products.
- Symantec Security Response SYM04-013: Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues.
- BID-11237: Symantec Enterprise Firewall/VPN Appliance Multiple Remote Vulnerabilities
Platforms Affected:
- Symantec Firewall VPN Appliance 100
- Symantec Firewall VPN Appliance 200
- Symantec Firewall VPN Appliance 200R
- Symantec Gateway Security 360R
- Symantec Nexland ISB Soho Firewall Appliance
- Symantec Nexland Pro100 Firewall Appliance
- Symantec Nexland Pro400 Firewall Appliance
- Symantec Nexland Pro800 Firewall Appliance
- Symantec Nexland Pro800Turbo Firewall Appliance
- Symantec Nexland WaveBase Firewall Appliance
Reported:
Sep 22, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net