Symantec Norton Internet Security 2003 Denial of Service Vulnerability

vendor:

Norton Internet Security 2003

by:

SecurityFocus

CVSS

MEDIUM

Denial of Service

N/A

CWE

Product Name: Norton Internet Security 2003

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2003

Symantec Norton Internet Security 2003 Denial of Service Vulnerability

Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive (approximately 65500 or more) number of ICMP packets to a host running Norton Internet Security. This may cause a denial of service and possible system instability. For this issue to be present remotely, the software must be configured to allow ICMP packets and the firewall must be enabled. Otherwise, it is possible to trigger this condition locally.

Mitigation:

Configure the software to not allow ICMP packets and disable the firewall.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6598/info

Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition.

It is possible to trigger this condition by sending an excessive (approximately 65500 or more) number of ICMP packets to a host running Norton Internet Security. This may cause a denial of service and possible system instability.

For this issue to be present remotely, the software must be configured to allow ICMP packets and the firewall must be enabled. Otherwise, it is possible to trigger this condition locally.

It is not known if earlier versions of the software are also affected by this vulnerability.

ping targetip -l 65500