Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Symantec Messaging Gateway ausnutzen, um beliebigen Programmcode auszuführen.
Product
Symantec Messaging powered by Brightmail ist eine Messaging-Sicherheitslösung, die den Schutz ein- und ausgehender Nachrichten mit Technologien für Spam- und Virenschutz, Content Filtering, Data Loss Prevention und E-Mail-Verschlüsselung verbessert.
Vulnerabilities 2
-
Critical 10.0
Symantec Messaging Gateway Buffer Overflow
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
-
Critical 10.0
Symantec Messaging Gateway Buffer Overflow
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2024-01-25
https://github.com/advisories/GHSA-29g4-35pw-347h
-
Exodus Blog vom 2024-01-25
https://blog.exodusintel.com/2024/01/25/symantec-messaging-gateway-stack-buffer-overflow-remote-code-execution/
-
GitHub Advisory Database vom 2024-01-25
https://github.com/advisories/GHSA-cc2p-6hmp-4729
-
Exodus Blog vom 2024-01-25
https://blog.exodusintel.com/2024/01/25/symantec-messaging-gateway-libdec2lha-so-stack-buffer-overflow-remote-code-execution/