Unscored CVE-2006-4562 EUVD-2006-4550GHSA-97wm-hr4h-jwm3

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, …

Published Sep 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

References

20060823 Symantec Gateway Security DNS exploit mailing-list
20060823 AW: Symantec Gateway Security DNS exploit mailing-list
20060824 Re: Symantec Gateway Security DNS exploit mailing-list
20060823 RE: Symantec Gateway Security DNS exploit mailing-list