CVE-2012-0303

The CVE-2012-0303 entry applies to Symantec Message Filter’s Brightmail Control Center (web management interface) and describes multiple CSRF vulnerabilities in version 6.3 that allow remote attackers to hijack user authentication for actions such as executing commands or creating an admin accoun...

CVE-2012-0302

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0300

CVE-2012-0300 affects Symantec Message Filter’s Brightmail Control Center/web management interface (Symantec Message Filter 6.3 and prior). Root cause: improper restriction of sessions to the listening port enables remote disclosure of potentially sensitive version information via unspecified vec...

PT-2012-2476

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns the Brightmail Control Center component in Symantec Message Filter, which fails to properly restrict the establishment of sessions to the listening port. This allows remote...

PT-2012-2477

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description A session fixation issue in the Brightmail Control Center component allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For...

PT-2012-2479

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Brightmail Control Center component. These vulnerabilities allow remote attackers to hijack the authentication o...

CVE-2012-0301: Improper Authentication

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2012-0302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0303: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 execute application commands or 2 create admin accounts...

CVE-2012-0300: Undefined Security Weakness

Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remote attackers to obtain potentially sensitive version information via unspecified vectors...

Symantec Message Filter Management Interface Default Credentials

Brightmail Control Center BCC is the administrative web interface for Symantec Message Filter. It is possible to log into the remote BCC by providing the default credentials. A remote attacker could exploit this to gain administrative control of the application. %NASLMINLEVEL 70300 C Tenable...

Symantec Message Filter Multiple Vulnerabilities (SYM12-010)

The version of Brightmail Control Center the web management interface for Symantec Message Filter hosted on the remote web server has the following vulnerabilities : - Multiple information disclosure vulnerabilities. CVE-2012-0300 - Session fixation. CVE-2012-0301 - Unspecified cross-site...

Symantec Brightmail AntiSpam Nested Zip Handling Denial of Service

A denial of service vulnerability has been reported in Symantec Brightmail AntiSpam. The vulnerability is due to an error in the way the product handles ZIP archives. A remote attacker may exploit this vulnerability by enticing a target user a deeply nested ZIP archive file. Successful exploitati...

Buffer overflow

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

CVE-2011-0548

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

CVE-2011-0548

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

CVE-2011-0548

CVE-2011-0548 concerns a buffer overflow in the Lotus Freelance Graphics PRZ file viewer component of Autonomy KeyView, used in Symantec Mail Security (SMS) 6.x–8.x, Symantec Brightmail and Messaging Gateway pre-9.5.1, and Symantec DLP pre-10.5.3 and 11.x pre-11.1. The vulnerability allows a remo...

Multi-Vendor Autonomy Verity Keyview PRZ Reader Filter Overflow

SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address a security issue being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Mail...

Symantec generic PDF detection bypass

No description provided by source. Symantec multiple products - Generic PDF bypass Cheap plug : Speaking of PDF - If you are interested in client-side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani,...

Buffer overflow

Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer aka File Viewer for Excel, as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention DLP, and other products, allows remote attackers to execute arbitrary code...