Detections
Analytics
Symantec Mail Security KeyView PRZ Processing Buffer Overflow
high Nessus Plugin ID 55047
Language:
Synopsis
The remote Windows host has an application that is affected by a buffer overflow vulnerability.Description
The file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by a buffer overflow vulnerability that can be triggered when handling attachments of various types.By sending an email with a specially crafted attachment through a vulnerable server, an attacker may be able to execute arbitrary code subject to the privileges under which the affected daemon runs.
Solution
If using Symantec Mail Security for Domino, upgrade to version 7.5.11 / 8.0.8.If using Symantec Mail Security for Microsoft Exchange, upgrade to version 6.0.12 / 6.5.5.
See Also
Plugin Details
Severity: High
ID: 55047
File Name: sms_keyview_overflow.nasl
Version: 1.9
Type: local
Agent: windows
Family: Windows
Published: 6/10/2011
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:symantec:mail_security
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Patch Publication Date: 5/31/2011
Vulnerability Publication Date: 5/24/2011
Reference Information
CVE: CVE-2011-0548
BID: 48013