337 matches found
Symantec Messaging Gateway Detection
Symantec Messaging Gateway formerly known as Symantec Brightmail Gateway was detected on the remote host. This application provides inbound and outbound messaging security. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62009; scriptversion"1.11";...
Symantec Messaging Gateway 9.5 default SSH password Exploit-vulnerability warning-the black bar safety net
Symantec Messaging Gateway by Brightmail, previously known as Brightmail Gateway provides support, provides inbound and outbound Messaging Security, with effective and accurate real-time antispam and antivirus protection, advanced content filtering, data loss prevention, and optional email...
Symantec Messaging Gateway 9.5 Default SSH Password
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Symantec Messaging Gateway 9.5 Default SSH Password
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...
Symantec Messaging Gateway < 10.0 Multiple Vulnerabilities
Symantec Messaging Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SEC Consult SA-20120829-0 :: Symantec Messaging Gateway - Support Backdoor
SEC Consult Vulnerability Lab Security Advisory 20120829-0 ======================================================================= title: Support Backdoor product: Symantec Messaging Gateway vulnerable version: 9.5.x fixed version: 10.0 CVE number: CVE-2012-3579 impact: Critical homepage:...
CVE-2012-3579
Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...
CVE-2012-3581
Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...
CVE-2012-3580
Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...
CVE-2012-0308
Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...
CVE-2012-0307
Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...
Memory corruption
Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...
Information disclosure
Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...
Default credentials
Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...
CVE-2012-3579
Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...
CVE-2012-3581
Symantec Messaging Gateway (SMG) before 10.0 suffers an Information Disclosure vulnerability (CVE-2012-3581) that allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors. Exploitation status is not detailed in the provided documents. Re...
CVE-2012-0307
CVE-2012-0307 affects Symantec Messaging Gateway (SMG) prior to version 10.0. The vulnerability class is multiple cross-site scripting (XSS) issues, allowing remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content. The public references describe XSS in th...