CVE-2012-3579 Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
HighCVSS 7.9
EPSS 40.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec messaging gateway | <= 9.5.4 | No fix listed |
| symantec messaging gateway | = 9.5 | No fix listed |
| symantec messaging gateway | = 9.5.1 | No fix listed |
| symantec messaging gateway | = 9.5.2 | No fix listed |
| symantec messaging gateway | = 9.5.3 | No fix listed |
References
- packetstormsecurity.com
- 55143 vdb-entry
- www.symantec.com vendor-advisory
- symantec-gateway-default-password(78034) vdb-entry