Lucene search

K

Symantec Message Filter Multiple Vulnerabilities

🗓️ 27 Jun 2012 00:00:00Reported by Copyright (C) 2012 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 16 Views

Symantec Message Filter 6.3, Multiple Vulnerabilitie

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
Symantec
Symantec Message Filter Security Issues
26 Jun 201208:00
symantec
OpenVAS
Symantec Message Filter Multiple Vulnerabilities
27 Jun 201200:00
openvas
Tenable Nessus
Symantec Message Filter Multiple Vulnerabilities (SYM12-010)
3 Jul 201200:00
nessus
Prion
Cross site request forgery (csrf)
5 Jul 201217:55
prion
Prion
Cross site scripting
5 Jul 201217:55
prion
Prion
Session fixation
5 Jul 201217:55
prion
Prion
Information disclosure
5 Jul 201217:55
prion
CVE
CVE-2012-0301
5 Jul 201217:55
cve
CVE
CVE-2012-0300
5 Jul 201217:55
cve
CVE
CVE-2012-0303
5 Jul 201217:55
cve
Rows per page
# SPDX-FileCopyrightText: 2012 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if (description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.103501");
  script_cve_id("CVE-2012-0300", "CVE-2012-0301", "CVE-2012-0302", "CVE-2012-0303");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_version("2025-01-17T15:39:18+0000");

  script_name("Symantec Message Filter Multiple Vulnerabilities");


  script_tag(name:"last_modification", value:"2025-01-17 15:39:18 +0000 (Fri, 17 Jan 2025)");
  script_tag(name:"creation_date", value:"2012-06-27 12:18:39 +0200 (Wed, 27 Jun 2012)");
  script_category(ACT_ATTACK);
  script_tag(name:"qod_type", value:"remote_vul");
  script_family("Web application abuses");
  script_tag(name:"solution_type", value:"VendorFix");
  script_copyright("Copyright (C) 2012 Greenbone AG");
  script_dependencies("find_service.nasl", "httpver.nasl", "global_settings.nasl");
  script_require_ports("Services/www", 80);
  script_exclude_keys("Settings/disable_cgi_scanning");
  script_tag(name:"solution", value:"The vendor has released an advisory and fixes. Please see the
references for more information.");
  script_tag(name:"summary", value:"Symantec Message Filter is prone to multiple vulnerabilities.

1. A remote information disclosure vulnerability.

Attackers can exploit this issue to gain access to sensitive
information that may aid in further attacks.

2. A session-fixation vulnerability.

Successfully exploiting this issue, an attacker can hijack an arbitrary session
and gain unauthorized access to the affected application.

3. An unspecified cross-site scripting vulnerability because it fails to
sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the
browser of an unsuspecting user in the context of the affected site. This may
allow the attacker to steal cookie-based authentication credentials and to
launch other attacks.

4. An unspecified cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain
administrative actions and gain unauthorized access to the affected application.
Other attacks are also possible.

Symantec Message Filter 6.3 is vulnerable.");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/54136");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/54133");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/54134");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/54135");
  script_xref(name:"URL", value:"http://www.symantec.com/business/support/index?page=content&id=TECH191487");
  exit(0);
}

include("http_func.inc");
include("http_keepalive.inc");
include("port_service_func.inc");
include("host_details.inc");

port = http_get_port(default:80);

url = '/brightmail/index.jsp';

if(http_vuln_check(port:port, url:url, pattern:"<title>Symantec.*Message Filter.*login</title>", usecache:TRUE)) {

  url = '/brightmail/about.jsp';

  # http://www.symantec.com/business/support/index?page=content&id=TECH191487
  #
  # Verification
  #
  # ============
  #
  # Open a new browser, and type the following URL's one at a time:
  #
  #  1. http://<your_ControlCenter_IP>:41080/brightmail/about.jsp
  #  2. http://<your_ControlCenter_IP>:41080/brightmail/try.do
  #
  #  Expected results:
  #
  #   1. You are redirected to the user logon page.
  #   2. An error page with Symantec logo is displayed indicating "Bad Request".

  if(http_vuln_check(port:port, url:url,pattern:"About Symantec",extra_check:make_list("iframe.*legal.html"),check_header:TRUE)) {
    security_message(port:port);
    exit(0);
  }
}

exit(0);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo