CVE:CVE-2005-3768
CNNVD:CNNVD-200511-338
Symantec动态VPN服务中实施的Internet Key Exchange第1版(IKEv1)中的缓冲区溢出(用在企业防火墙、网关安全性和防火墙/VPN设备产品中)，可让远程攻击者通过特制的IKE数据包使系统拒绝服务并可能执行任意代码，如PROTOS ISAKMP针对IKEv1的测试套件所示。
solution:Upgrade symantec enterprise_firewall to a higher version than 8.0,and avoid the version 8.0; Upgrade symantec firewall_vpn_appliance_100 to a higher version than *; Upgrade symantec firewall_vpn_appliance_200 to a higher version than *; Upgrade symantec gateway_security_300 to a higher version than 2.0,and avoid the version 2.0; Upgrade symantec gateway_security_400 to a higher version than 2.0,and avoid the version 2.0; Upgrade symantec gateway_security_5000_series to a higher version than 3.0,and avoid the version 3.0; Upgrade symantec gateway_security_5100 to a higher version than *; Upgrade symantec gateway_security_5300 to a higher version than 1.0,and avoid the version 1.0; Upgrade symantec gateway_security_5310 to a higher version than 1.0,and avoid the version 1.0; Upgrade symantec gateway_security_5400 to a higher version than 2.0.1,and avoid the version 2.0.1