Description
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.
References
- sef-dns-spoofing(16423) vdb-entry
- http://www.isc.sans.org/diary.php?date=2005-03-04
- http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html
- symantec-dnsdproxy-redirect(44530) vdb-entry
- 1013451 vdb-entry
- 20040615 Symantec Enterprise Firewall DNSD cache poisoning Vulnerability mailing-list
- 14595 third-party-advisory