high7.9Public exploit code
CVE-2012-3579
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Messaging Gateway 9.5/9.5.1 - SSH Default Password Security Bypass (Metasploit)2012-08-30 · remote · linux · Verified
Impact
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Messaging Gateway | through 9.5.4 Versions 9.5, 9.5.1, 9.5.2, 9.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html
- http://www.securityfocus.com/bid/55143
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78034
- http://packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html
- http://www.securityfocus.com/bid/55143
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78034