CVE-2004-0369

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

• http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.htmlVendor Advisory
• http://www.auscert.org.au/render.html?it=4339Vendor Advisory
• http://www.ciac.org/ciac/bulletins/o-206.shtmlVendor Advisory
• http://www.securityfocus.com/bid/11039
• http://xforce.iss.net/xforce/alerts/id/181Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15669
• http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.htmlVendor Advisory
• http://www.auscert.org.au/render.html?it=4339Vendor Advisory
• http://www.ciac.org/ciac/bulletins/o-206.shtmlVendor Advisory
• http://www.securityfocus.com/bid/11039
• http://xforce.iss.net/xforce/alerts/id/181Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0363Stack-based buffer overflow in the SymSpamHelper ActiveX com…
• CVE-2004-0364The WrapNISUM ActiveX component (WrapUM.dll) in Norton Inter…
• CVE-2004-0365The dissect_attribute_value_pairs function in packet-radius.…7.5
• CVE-2004-0366SQL injection vulnerability in the libpam-pgsql library befo…
• CVE-2004-0367Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a…
• CVE-2004-0368Double free vulnerability in dtlogin in CDE on Solaris, HP-U…
• CVE-2004-0370The setsockopt call in the KAME Project IPv6 implementation,…
• CVE-2004-0371Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not p…
• CVE-2004-0372xine allows local users to overwrite arbitrary files via a s…
• CVE-2004-0374Interchange before 5.0.1 allows remote attackers to "expose …
• CVE-2004-0375SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 20…
• CVE-2004-0376oftpd 0.3.6 and earlier allows remote attackers to cause a d…