27 April 2009, 09:48
Vulnerability patched in Symantec Brightmail Gateway
Symantec has released an update for its Brightmail Gateway email security appliance to fix a cross-site scripting and privilege escalation vulnerability in the appliances web based Control Centre. Attackers could exploit the vulnerabilities from the internal network as the Control Centre failed to properly filter client input from authorised users of the Control Centre console.
The update is available via the Software Update feature of Brightmail and is also available to registered users to download.
See also:
- Symantec Brightmail Gateway Appliance Cross-site Scripting and Elevation of Privilege, advisory from Symantec
(djwm)
Print Version | Send by email
| Permalink: http://h-online.com/-741315
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
