Fedora Update for pidgin FEDORA-2012-8669

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8669 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for libotr FEDORA-2012-11934

Check for the Version of libotr OpenVAS Vulnerability Test Fedora Update for libotr FEDORA-2012-11934 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for libotr FEDORA-2012-11959

Check for the Version of libotr OpenVAS Vulnerability Test Fedora Update for libotr FEDORA-2012-11959 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Symantec Messaging Gateway 9.5/9.5.1 - SSH Default Password Security Bypass (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...

CVE-2012-3579

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-3580

Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...

CVE-2012-3581

Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...

CVE-2012-0308

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

CVE-2012-0307

Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...

Memory corruption

Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...

Information disclosure

Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

Default credentials

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-0307

Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...

CVE-2012-0308

Cross-site request forgery CSRF vulnerability in Symantec Messaging Gateway SMG before 10.0 allows remote attackers to hijack the authentication of administrators...

CVE-2012-3580

Symantec Messaging Gateway SMG before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface...

CVE-2012-3581

Symantec Messaging Gateway SMG before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors...

CVE-2012-3579

Symantec Messaging Gateway (SMG) versions before 10.0 are vulnerable to CVE-2012-3579 due to a hardcoded default SSH password on the support account, enabling remote login and privileged access via SSH. The issue is documented across multiple sources (SAINT advisories and OpenVAS/Nessus reference...

CVE-2012-0308

Summary (CVE-2012-0308): Symantec Messaging Gateway (SMG) prior to version 10.0 is vulnerable to a Cross-Site Request Forgery (CSRF) that can hijack the authentication of administrators. The issue stems from insufficient input validation, enabling a remote attacker to entice a logged-in admin to ...