CVE-2006-4562: Symantec Gateway Security

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

Affected products

• Symantec Gateway Security: version 1.0 only; version 320 only; version 360 only; version 360r only; version 5000_series_2.0.1 only; version 5000_series_3.0 only; …

Published 2006-09-06. Last modified 2026-06-16.