CVE-2004-0369: Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0,...

Security readout for executives and security teams

This is an old but serious flaw in an Entrust ISAKMP library used by several Symantec firewall and gateway products. A remote attacker could send a specially crafted ISAKMP message and potentially run code on the device. Business risk depends on whether any listed legacy products remain deployed or reachable. Exposure is most likely where legacy Symantec firewall or gateway products listed in the CVE still process ISAKMP/IKE traffic. Internet-facing or partner-facing perimeter deployments would matter most. The provided data does not identify affected CPEs or newer product lines. Prioritize discovery and containment if these legacy products are still present. Remote code execution on perimeter security devices can create disproportionate business risk, but urgency should be driven by confirmed asset exposure because the bundle does not show active exploitation. Mitigation focus: Inventory for the listed Symantec products and versions.; Check Symantec or successor vendor guidance for fixed builds or retirement direction.; Remove or isolate unsupported affected systems from untrusted networks..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.