PT-2012-2477 · Symantec · Symantec Message Filter

Publicado 2012-07-05 · Atualizado 2012-07-06 · CVE-2012-0301

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3

Description A session fixation issue in the Brightmail Control Center component allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified.

Recommendations For Symantec Message Filter version 6.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-0301

Produtos afetados

Symantec Message Filter

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-0301 · Nota de Segurança
• http://securityfocus.com/bid/54135 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 · Aviso do Fabricante