PT-2017-17000 · Symantec · Symantec Messaging Gateway

Mehmet Ince · Publicado 2017-06-26 · Atualizado 2019-10-03 · CVE-2017-6326

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway (affected versions not specified)

Description The issue allows for remote code execution, which means an individual can execute commands remotely on a target machine or in a target process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2017-6326

Produtos afetados

Symantec Messaging Gateway

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_messaging_gateway_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/42251 · Exploit
• 🔥 https://pentest.blog/unexpected-journey-5-from-weak-password-to-rce-on-symantec-messaging-gateway · Exploit
• https://osv.dev/vulnerability/CVE-2017-6326 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6326 · Nota de Segurança
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00 · Aviso do Fabricante
• http://securityfocus.com/bid/98893 · Nota
• http://securitytracker.com/id/1038785 · Nota