Vulnerability Bulletins |
Múltiples vulnerabilidades en Symantec Message Filter |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Confidencialidad |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software | Symantec Message Filter versión 6.3 |
Description |
|
|
Se han descubierto múltiples vulnerabilidades de confidencialidad, obtención de acceso, Cross-Site Scripting (XSS) y Cross-Site request Forgery (CSRF) en Symantec Message Filter versión 6.3. Las vulnerabilidades son descritas a continuación: |
|
Solution |
|
|
Symantec ha publicado un parche que corrige las anteriores vulnerabilidades. http://www.symantec.com/business/support/index?page=content&id=TECH191487 |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2012-0300 CVE-2012-0301 CVE-2012-0302 CVE-2012-0303 |
| BID |
BID 54136 BID 54135 BID 54134 BID 54133 |
Other resources |
|
|
Symantec Message Filter Security Issues SYM12-010 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 HISPASEC SISTEMAS Symantec Message Filter http://unaaldia.hispasec.com/2012/07/multiples-vulnerabilidades-en-symantec.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Advisoryissued | 2012-07-04 |