Symantec Message Filter Multiple Vulnerabilities (SYM12-010)

NASLDB: Symantec Message Filter Multiple Vulnerabilities (SYM12-010)

General

ID: 59836
Name: Symantec Message Filter Multiple Vulnerabilities (SYM12-010)

Summary: Checks if about.jsp is accessible without authentication

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 41080
Family: CGI abuses
Type: Remote

Description

The version of Brightmail Control Center (the web management interface
for Symantec Message Filter) hosted on the remote web server has the
following vulnerabilities :

– Multiple information disclosure vulnerabilities.
(CVE-2012-0300)

– Session fixation. (CVE-2012-0301)

– Unspecified cross-site scripting. (CVE-2012-0302)

– Unspecified cross-site request forgery. (CVE-2012-0303)