high7.8Public exploit code
CVE-2016-2203
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveragin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Brightmail 10.6.0-7 - LDAP Credentials Disclosure (Metasploit)2016-04-21 · webapps · java
Impact
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Messaging Gateway | Version 10.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html
- http://www.securityfocus.com/bid/86137
- http://www.securitytracker.com/id/1035609
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00
- https://www.exploit-db.com/exploits/39715/
- http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html
- http://www.securityfocus.com/bid/86137
- http://www.securitytracker.com/id/1035609
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00
- https://www.exploit-db.com/exploits/39715/