Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM12-018)

This script is Copyright (C) 2012-2016 Tenable Network Security, Inc.


Synopsis :

The remote Windows host has a mail security application installed that
is affected by multiple vulnerabilities.

Description :

The file attachment filter component included with the instance of
Symantec Mail Security installed on the remote Windows host is
reportedly affected by multiple, unspecified code execution
vulnerabilities that can be triggered when handling attachments of
various types.

By sending an email with a specially crafted attachment through a
vulnerable server, an attacker could execute arbitrary code subject to
the privileges under which the affected daemon runs.

See also :

http://www.nessus.org/u?84141df1

Solution :

Upgrade to Symantec Mail Security for Microsoft Exchange 6.5.8 or
later.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 8.1
(CVSS2#E:ND/RL:OF/RC:C)
Public Exploit Available : false

Family: Windows

Nessus Plugin ID: 63067 ()

Bugtraq ID: 56610

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now