Vulnerability Description
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Brightmail Gateway Appliance | <= 8.0 |
References
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117Patch
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
- http://www.vupen.com/english/advisories/2009/1155PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117Patch
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
- http://www.vupen.com/english/advisories/2009/1155PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
FAQ
What is CVE-2009-0064?
CVE-2009-0064 is a vulnerability with a CVSS score of 9.0 (HIGH). Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive info...
How severe is CVE-2009-0064?
CVE-2009-0064 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-0064?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Brightmail Gateway Appliance.