Symantec Clientless VPN Gateway 4400 vulnerabilities

4 CVEs affecting Symantec Clientless VPN Gateway 4400, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1483, published 2004-12-31.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
• CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
• CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
• CVE-2004-1483, published 2004-12-31. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.