CVE ID:	CVE-2004-0444
Description:	Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
Test IDs:	1.3.6.1.4.1.25623.1.0.12216
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0444 BugTraq ID: 10333 http://www.securityfocus.com/bid/10333 BugTraq ID: 10334 http://www.securityfocus.com/bid/10334 BugTraq ID: 10335 http://www.securityfocus.com/bid/10335 CERT/CC vulnerability note: VU#294998 http://www.kb.cert.org/vuls/id/294998 CERT/CC vulnerability note: VU#634414 http://www.kb.cert.org/vuls/id/634414 CERT/CC vulnerability note: VU#637318 http://www.kb.cert.org/vuls/id/637318 Computer Incident Advisory Center Bulletin: O-141 http://www.ciac.org/ciac/bulletins/o-141.shtml http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html http://www.osvdb.org/6099 http://www.osvdb.org/6101 http://www.osvdb.org/6102 http://securitytracker.com/id?1010144 http://securitytracker.com/id?1010145 http://securitytracker.com/id?1010146 http://secunia.com/advisories/11066 XForce ISS Database: symantec-dns-response-bo(16137) https://exchange.xforce.ibmcloud.com/vulnerabilities/16137 XForce ISS Database: symantec-firewalls-nbns-bo(16135) https://exchange.xforce.ibmcloud.com/vulnerabilities/16135 XForce ISS Database: symantec-nbns-response-bo(16134) https://exchange.xforce.ibmcloud.com/vulnerabilities/16134