CVE

Id
20666  
CVE No.
CVE-2006-4562  
Status
Candidate  
Description
** DISPUTED ** The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface.  
Phase
Assigned (20060905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
194459 20666 CVE-2006-4562 BUGTRAQ:20060823 Symantec Gateway Security DNS exploit  View
194460 20666 CVE-2006-4562 URL:http://www.securityfocus.com/archive/1/archive/1/444114/100/100/threaded  View
194461 20666 CVE-2006-4562 BUGTRAQ:20060823 RE: Symantec Gateway Security DNS exploit  View
194462 20666 CVE-2006-4562 URL:http://www.securityfocus.com/archive/1/archive/1/444135/100/100/threaded  View
194463 20666 CVE-2006-4562 BUGTRAQ:20060824 Re: Symantec Gateway Security DNS exploit  View
194464 20666 CVE-2006-4562 URL:http://www.securityfocus.com/archive/1/archive/1/444330/100/0/threaded  View
194465 20666 CVE-2006-4562 BUGTRAQ:20060823 AW: Symantec Gateway Security DNS exploit  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60837 JVNDB-2006-003103 Simple Machines Forum の Sources/ManageBoards.php における SQL インジェクションの脆弱性 Simple Machines Forum の Sources/ManageBoards.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4564 20666 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003103.html  View