CVE-2017-6327

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to t...

CVE-2017-6328

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery also known as one-click attack and is abbreviated as CSRF or XSRF, which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web applicati...

CVE-2017-6327

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to t...

CVE-2017-6328

CVE-2017-6328 affects Symantec Messaging Gateway before 10.6.3-267. The vulnerability is a cross-site request forgery (CSRF/XSRF) flaw where authenticated actions (e.g., logout) can be triggered by forged requests without multi-step tokens. Public sources (NVD, Nessus/SA plug-in, OpenVAS entry, E...

CVE-2017-6327

CVE-2017-6327 affects Symantec Messaging Gateway prior to 10.6.3-267, with unauthenticated remote code execution through the web interface. Reports describe a pre-auth flaw (RestoreAction/web login handling) enabling arbitrary command execution with root privileges on affected appliances, exposed...

CVE-2017-6327

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to t...

Symantec Releases Security Update

Symantec has released an update to address vulnerabilities in the Symantec Messaging Gateway. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Symantec Security Advisory and...

Symantec Messaging Gateway RCE and CSRF

SUMMARY Symantec has released an update to address two issues that were discovered in the Symantec Messaging Gateway SMG. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2017-6327 CVE-2017-6328 | Prior to 10.6.3-267 | Upgrade to 10.6.3-267 ISSUES...

Symantec Messaging Gateway 10.6.3-267 - Cross-Site Request Forgery

Symantec Messaging Gateway 10.6.3-267 - Cross-Site Request Forgery Exploit Title: CSRF Date: August 9, 2017 Software Link: https://www.symantec.com/products/messaging-gateway Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ CVE:...

Symantec Messaging Gateway < 10.6.3-267 - Cross-Site Request Forgery

Exploit Title: CSRF Date: August 9, 2017 Software Link: https://www.symantec.com/products/messaging-gateway Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ CVE: CVE-2017-6328 Category: Symantec Messaging Gateway 1. Description The...

Symantec Management Console Installed

Binary data symantecmanagementconsoledetect.nbin...

Symantec Management Console Multiple XSS and XXE Vulnerabilities (SYM17-005)

The version of Symantec Manager Console running on the remote host is earlier then ITM 8.1 RU1, ITMS 8.0POSTHF6 or ITMS 7.6POSTHF7 and is therefore affected by multiple cross-site scripting XSS and XML External Entity XXE processing vulnerabilities. C Tenable Network Security, Inc...

SA154: Apache httpd Vulnerabilities June 2017

SUMMARY Symantec Network Protection products using affected versions of Apache httpd are susceptible to multiple security vulnerabilities. A remote attacker, with access to the management interface, can cause denial of service through application crashes or bypass required authentication. AFFECTE...

Symantec Messaging Gateway remote code execution (CVE-2017-6326)

Command injection vulnerability exists in Symantec Messaging Gateway. The vulnerability is due to insufficient validation of property. An authenticated user can execute a terminal command under the context of the web server user which is root...

Threat Outbreak Alert RuleID29818: Email Messages Distributing Malicious Software on July 17, 2017

Medium Alert ID: 54501 First Published: 2017 July 17 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29818 may contain the following files: Name | Siz...

SA153: NSS Vulnerabilities Apr-May 2017

SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to two security vulnerabilities. A remote attacker can send empty SSLv2 messages and cause denial of service through application crashes. An attacker can also have unspecified impact by exploiting a...

SA151: ImageMagick RCE Vulnerability (ImageTragick)

SUMMARY Symantec Network Protection products using affected versions of ImageMagick are susceptible to the ImageTragick security vulnerability. A remote attacker can send crafted images and execute arbitrary code on the target. AFFECTED PRODUCTS The following products are vulnerable: Security...

Symantec Messaging Gateway 10.x < 10.6.3-266 Multiple Vulnerabilities (SYM17-004)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.3-266. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when handling email attachments involving malformed o...

Multiple XML External Entity Injection Vulnerabilities in Symantec Management Console

Symantec Management Console is a management tool console. Multiple XML external entity injection vulnerabilities exist in Symantec Management Console. An attacker could exploit the vulnerabilities to obtain potentially sensitive information or cause a denial of service condition. This could lead ...

Veritas / Symantec Backup Exec - SSL NDMP Connection Use-After-Free Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/ndmpsocket' require 'openssl' require 'xdr' class MetasploitModule 'Veritas/Symantec...