Symantec Messaging Gateway CVE-2017-6325 Local File Include Vulnerability

Symantec Messaging Gateway is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to obtain potentially sensitive information and execute arbitrary local scripts. This could allow the attacker to compromise the application and the computer; other attacks are also possible.

Versions prior to Symantec Messaging Gateway 10.6.3-266 are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus