CVE-2004-0369

CVE-2004-0369 describes a buffer overflow vulnerability within the Entrust LibKmp ISAKMP library. This flaw impacts several products, including Symantec Enterprise Firewall versions 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5. A remote attacker can exploit this vulnerability by sending a specially crafted ISAKMP payload, potentially leading to arbitrary code execution. The vulnerability carries a CVSS score of 7.5, indicating high severity. It can be exploited remotely with low attack complexity and no authentication required, allowing for potential compromise of confidentiality, integrity, and availability. The EPSS score of 0.08501 suggests a relatively low probability of exploitation in the wild compared to other CVEs. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Furthermore, there is minimal community discussion or media coverage surrounding this CVE, suggesting it has not garnered significant attention from researchers or threat actors.