EUVD-2012-0337

Malware in sbrugna...

EUVD-2012-0336

Malware in sbrugna...

EUVD-2012-0338

Malware in sbrugna...

CVE-2012-0302

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0300

Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remote attackers to obtain potentially sensitive version information via unspecified vectors...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-0302

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Session fixation

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

Cross site scripting

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-0301

Symantec Message Filter’s Brightmail Control Center (web interface) 6.3 is tied to CVE-2012-0301, a session-fixation vulnerability that can allow an attacker to hijack a legitimate user session via unspecified vectors. The linked open-source advisories and vendor notes confirm that this issue aff...

CVE-2012-0302

CVE-2012-0302 concerns an XSS vulnerability in Brightmail Control Center (the web management interface for Symantec Message Filter) version 6.3. The issue arises from insufficient input validation in the Brightmail Control Center, allowing remote attackers to inject arbitrary web script or HTML v...

CVE-2012-0303

The CVE-2012-0303 entry applies to Symantec Message Filter’s Brightmail Control Center (web management interface) and describes multiple CSRF vulnerabilities in version 6.3 that allow remote attackers to hijack user authentication for actions such as executing commands or creating an admin accoun...

CVE-2012-0302

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0303: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

PT-2012-2476

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns the Brightmail Control Center component in Symantec Message Filter, which fails to properly restrict the establishment of sessions to the listening port. This allows remote...

PT-2012-2477

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description A session fixation issue in the Brightmail Control Center component allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For...

PT-2012-2479

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Brightmail Control Center component. These vulnerabilities allow remote attackers to hijack the authentication o...