VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 6, 2006· Updated Apr 16, 2026

CVE-2006-4562

CVE-2006-4562

Description

The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface

Affected products

15
  • Symantec/Gateway Security15 versions
    cpe:2.3:h:symantec:gateway_security:1.0:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:h:symantec:gateway_security:1.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:320:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:360:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:360r:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5000_series_2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5000_series_3.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5110:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5110_1.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5200:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5200_1.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5300:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5300_1.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5310_1.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5400_2.0:*:*:*:*:*:*:*
    • cpe:2.3:h:symantec:gateway_security:5400_2.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.