Vulnerability Details CVE-2009-0064
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.3%
CVSS Severity
CVSS v2 Score 9.0
References
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
- http://www.vupen.com/english/advisories/2009/1155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
- http://www.vupen.com/english/advisories/2009/1155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
Products affected by CVE-2009-0064
-
cpe:2.3:h:symantec:brightmail_gateway_appliance:*
-
cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5
-
cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6
-
cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7