VAR-200403-0061

Vulnerability from variot - Updated: 2025-04-03 22:26

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges. Symantec's firewall vpn appliance 100 , firewall vpn appliance 200 , firewall vpn appliance 200r Exists in unspecified vulnerabilities.None. It has been reported that Symantec Firewall/VPN Appliance is prone to an issue where depending on browser settings; administration password credentials may be stored in the browser\proxy cache in plaintext format. Symantec Firewall/VPN Appliance Models 100, 200, 200R are reported to be prone to this vulnerability

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200403-0061",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "firewall vpn appliance 200r",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "*"
      },
      {
        "model": "firewall vpn appliance 200",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "*"
      },
      {
        "model": "firewall vpn appliance 100",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "*"
      },
      {
        "model": "firewall vpn appliance 200r",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
        "version": null
      },
      {
        "model": "firewall vpn appliance 100",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
        "version": null
      },
      {
        "model": "firewall vpn appliance 200",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30de\u30f3\u30c6\u30c3\u30af",
        "version": null
      },
      {
        "model": "firewall vpn appliance 200r",
        "scope": null,
        "trust": 0.6,
        "vendor": "symantec",
        "version": null
      },
      {
        "model": "firewall vpn appliance 200",
        "scope": null,
        "trust": 0.6,
        "vendor": "symantec",
        "version": null
      },
      {
        "model": "firewall vpn appliance 100",
        "scope": null,
        "trust": 0.6,
        "vendor": "symantec",
        "version": null
      },
      {
        "model": "firewall/vpn appliance 200r",
        "scope": null,
        "trust": 0.3,
        "vendor": "symantec",
        "version": null
      },
      {
        "model": "firewall/vpn appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200"
      },
      {
        "model": "firewall/vpn appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "100"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "9784"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The disclosure of this issue has been credited to Davide Del Vecchio.",
    "sources": [
      {
        "db": "BID",
        "id": "9784"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2004-0190",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2004-0190",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-8620",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2004-0190",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2004-0190",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200403-066",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-8620",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator\u0027s local system or in a proxy, which allows attackers to steal the password and gain privileges. Symantec\u0027s firewall vpn appliance 100 , firewall vpn appliance 200 , firewall vpn appliance 200r Exists in unspecified vulnerabilities.None. It has been reported that Symantec Firewall/VPN Appliance is prone to an issue where depending on browser settings; administration password credentials may be stored in the browser\\proxy cache in plaintext format. \nSymantec Firewall/VPN Appliance Models 100, 200, 200R are reported to be prone to this vulnerability",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "BID",
        "id": "9784"
      },
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      }
    ],
    "trust": 1.98
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2004-0190",
        "trust": 3.3
      },
      {
        "db": "BID",
        "id": "9784",
        "trust": 2.8
      },
      {
        "db": "OSVDB",
        "id": "4117",
        "trust": 1.7
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066",
        "trust": 0.7
      },
      {
        "db": "FULLDISC",
        "id": "20040216 SYMANTEC FIREWALL/VPN APPLIANCE MODEL 200 LEAK OF SECURITY",
        "trust": 0.6
      },
      {
        "db": "BUGTRAQ",
        "id": "20040216 SYMANTEC FIREWALL/VPN APPLIANCE MODEL 200 LEAK OF SECURITY",
        "trust": 0.6
      },
      {
        "db": "XF",
        "id": "15212",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-8620",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "db": "BID",
        "id": "9784"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "id": "VAR-200403-0061",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T22:26:18.272000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      },
      {
        "problemtype": "others (CWE-Other) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.5,
        "url": "http://www.securityfocus.com/bid/9784"
      },
      {
        "trust": 2.5,
        "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-february/017414.html"
      },
      {
        "trust": 1.9,
        "url": "http://marc.info/?l=bugtraq\u0026m=107694794031839\u0026w=2"
      },
      {
        "trust": 1.9,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15212"
      },
      {
        "trust": 1.7,
        "url": "http://www.osvdb.org/4117"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2004-0190"
      },
      {
        "trust": 0.6,
        "url": "http://xforce.iss.net/xforce/xfdb/15212"
      },
      {
        "trust": 0.6,
        "url": "http://marc.theaimsgroup.com/?l=bugtraq\u0026m=107694794031839\u0026w=2"
      },
      {
        "trust": 0.3,
        "url": "http://enterprisesecurity.symantec.com/products/products.cfm?productid=63"
      },
      {
        "trust": 0.3,
        "url": "http://www.symantec.com/avcenter/security/content/2004.03.03a.html"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "db": "BID",
        "id": "9784"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "db": "BID",
        "id": "9784"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2004-03-15T00:00:00",
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "date": "2004-03-02T00:00:00",
        "db": "BID",
        "id": "9784"
      },
      {
        "date": "2024-05-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "date": "2004-03-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "date": "2004-03-15T05:00:00",
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-10-10T00:00:00",
        "db": "VULHUB",
        "id": "VHN-8620"
      },
      {
        "date": "2004-03-02T00:00:00",
        "db": "BID",
        "id": "9784"
      },
      {
        "date": "2024-05-27T02:25:00",
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      },
      {
        "date": "2005-05-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2004-0190"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Vulnerabilities in multiple Symantec products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2004-000714"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "unknown",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200403-066"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.