Skip to main content

Messaging Gateway CVE-2017-6325

MEDIUM
Code Injection (CWE-94)
2017-06-26 secure@symantec.com
6.6
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.6 MEDIUM
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 26, 2017 - 21:29 cve.org
MEDIUM 6.6

DescriptionCVE.org

The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application.

AnalysisAI

The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Code Injection (CWE-94), which allows attackers to inject and execute arbitrary code within the application. The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application. Affected products include: Symantec Messaging Gateway.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Never evaluate user-controlled input as code. Use sandboxing, disable dangerous functions, apply strict input validation.

CVE-2017-6326 CRITICAL POC
10.0 Jun 26

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i

CVE-2012-4347 MEDIUM POC
5.0 Dec 05

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow r

CVE-2012-3579 HIGH POC
7.9 Aug 29

Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier fo

CVE-2016-5312 MEDIUM POC
6.5 Apr 14

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au

CVE-2016-2203 HIGH POC
7.8 Apr 22

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discove

CVE-2016-5309 MEDIUM POC
5.5 Apr 14

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

CVE-2016-5310 MEDIUM POC
5.5 Apr 14

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

CVE-2012-0308 MEDIUM POC
6.8 Aug 29

Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers

CVE-2018-12242 CRITICAL
9.8 Sep 19

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is

CVE-2018-12243 HIGH
8.8 Sep 19

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which

CVE-2014-1648 MEDIUM POC
4.3 Apr 23

Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management cons

CVE-2016-2204 HIGH
8.2 Apr 22

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain

Share

CVE-2017-6325 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy