ID de Prueba:	1.3.6.1.4.1.25623.1.0.103501
Categoría:	Web application abuses
Título:	Symantec Message Filter Multiple Vulnerabilities
Resumen:	Symantec Message Filter is prone to multiple vulnerabilities.;;1. A remote information disclosure vulnerability.;;Attackers can exploit this issue to gain access to sensitive;information that may aid in further attacks.;;2. A session-fixation vulnerability.;;Successfully exploiting this issue, an attacker can hijack an arbitrary session;and gain unauthorized access to the affected application.;;3. An unspecified cross-site scripting vulnerability because it fails to;sufficiently sanitize user-supplied input.;;An attacker may leverage this issue to execute arbitrary script code in the;browser of an unsuspecting user in the context of the affected site. This may;allow the attacker to steal cookie-based authentication credentials and to;launch other attacks.;;4. An unspecified cross-site request-forgery vulnerability.;;Exploiting this issue may allow a remote attacker to perform certain;administrative actions and gain unauthorized access to the affected application.;Other attacks are also possible.;;Symantec Message Filter 6.3 is vulnerable.
Descripción:	Summary: Symantec Message Filter is prone to multiple vulnerabilities. 1. A remote information disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. 2. A session-fixation vulnerability. Successfully exploiting this issue, an attacker can hijack an arbitrary session and gain unauthorized access to the affected application. 3. An unspecified cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 4. An unspecified cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible. Symantec Message Filter 6.3 is vulnerable. Solution: The vendor has released an advisory and fixes. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0300 BugTraq ID: 54136 http://www.securityfocus.com/bid/54136 Common Vulnerability Exposure (CVE) ID: CVE-2012-0301 BugTraq ID: 54135 http://www.securityfocus.com/bid/54135 Common Vulnerability Exposure (CVE) ID: CVE-2012-0302 BugTraq ID: 54134 http://www.securityfocus.com/bid/54134 Common Vulnerability Exposure (CVE) ID: CVE-2012-0303 BugTraq ID: 54133 http://www.securityfocus.com/bid/54133
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.