CVE-2012-3581

Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...

CVE-2012-3579

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-3580

Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...

CVE-2012-0308

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

CVE-2012-0308

Summary (CVE-2012-0308): Symantec Messaging Gateway (SMG) prior to version 10.0 is vulnerable to a Cross-Site Request Forgery (CSRF) that can hijack the authentication of administrators. The issue stems from insufficient input validation, enabling a remote attacker to entice a logged-in admin to ...

CVE-2012-0307

CVE-2012-0307 affects Symantec Messaging Gateway (SMG) prior to version 10.0. The vulnerability class is multiple cross-site scripting (XSS) issues, allowing remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content. The public references describe XSS in th...

CVE-2012-3581

Symantec Messaging Gateway (SMG) before 10.0 suffers an Information Disclosure vulnerability (CVE-2012-3581) that allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors. Exploitation status is not detailed in the provided documents. Re...

CVE-2012-3579

Symantec Messaging Gateway (SMG) versions before 10.0 are vulnerable to CVE-2012-3579 due to a hardcoded default SSH password on the support account, enabling remote login and privileged access via SSH. The issue is documented across multiple sources (SAINT advisories and OpenVAS/Nessus reference...

CVE-2012-3580

Symantec Messaging Gateway (SMG) prior to version 10.0 is affected by CVE-2012-3580, where remote authenticated users who have access to the management interface can modify the web application. The root cause is described as a web application modification issue that can be exploited by an authent...

CVE-2012-3581: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...

Symantec Messaging Gateway 9.5/9.5.1 SSH Default Password Security Bypass Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2012-3579: Undefined Security Weakness

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-3580: Undefined Security Weakness

Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...

PT-2012-4825

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.0 Description The issue allows remote attackers to gain privileged access via an SSH session due to a default password for an unspecified account. Recommendations For versions prior to 10.0, chan...

CVE-2012-0308: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

PT-2012-2484

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. Recommendations For versions prior to 10.0, update to version 10.0 or late...

PT-2012-4826

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.0 Description The issue allows remote authenticated users to modify the web application by leveraging access to the management interface. Recommendations For versions prior to 10.0, update to...

PT-2012-4827

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.0 Description The issue allows remote attackers to obtain potentially sensitive information about component versions. Recommendations For versions prior to 10.0, update to version 10.0 or later t...

CVE-2012-0307: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...

PT-2012-2483

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via two main vectors: 1 web...