Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)
High Nessus Plugin ID 56666
SynopsisThe remote Windows host has a mail security application installed that is affected by multiple vulnerabilities.
DescriptionThe file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by multiple buffer overflow vulnerabilities that can be triggered when handling attachments of various types.
By sending an email with a specially crafted attachment through a vulnerable server, an attacker could execute arbitrary code subject to the privileges under which the affected daemon runs.
SolutionIf using Symantec Mail Security for Domino, upgrade to version 7.5.12 / 8.0.9.
If using Symantec Mail Security for Microsoft Exchange, upgrade to version 6.0.13 / 6.5.6.