Test Kennung:	1.3.6.1.4.1.25623.1.0.802453
Kategorie:	Default Accounts
Titel:	Symantec Messaging Gateway < 10.0 Multiple Vulnerabilities
Zusammenfassung:	Symantec Messaging Gateway is prone to multiple vulnerabilities.
Beschreibung:	Summary: Symantec Messaging Gateway is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Certain input passed via web or email content is not properly sanitised before being returned to the user. - The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. - An error within the management interface can be exploited to perform otherwise restricted actions(modify the underlying web application). - An SSH default passworded account that could potentially be leveraged by an unprivileged user to attempt to gain additional privilege access. - Disclose of excessive component version information during successful reconnaissance. Vulnerability Impact: Successful exploitation will allow attackers to bypass certain security restrictions, disclose certain sensitive information and conduct cross-site scripting and request forgery attacks. Affected Software/OS: Symantec Messaging Gateway version 9.5.x. Solution: Upgrade to Symantec Messaging Gateway version 10.0 or later. CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0307 BugTraq ID: 55138 http://www.securityfocus.com/bid/55138 XForce ISS Database: symantec-gateway-unspec-xss(78031) https://exchange.xforce.ibmcloud.com/vulnerabilities/78031 Common Vulnerability Exposure (CVE) ID: CVE-2012-0308 BugTraq ID: 55137 http://www.securityfocus.com/bid/55137 Common Vulnerability Exposure (CVE) ID: CVE-2012-3579 BugTraq ID: 55143 http://www.securityfocus.com/bid/55143 http://packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html XForce ISS Database: symantec-gateway-default-password(78034) https://exchange.xforce.ibmcloud.com/vulnerabilities/78034 Common Vulnerability Exposure (CVE) ID: CVE-2012-3580 BugTraq ID: 55141 http://www.securityfocus.com/bid/55141 XForce ISS Database: symantec-gateway-interface-sec-bypass(78032) https://exchange.xforce.ibmcloud.com/vulnerabilities/78032 Common Vulnerability Exposure (CVE) ID: CVE-2012-3581 BugTraq ID: 55142 http://www.securityfocus.com/bid/55142
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.