Symantec Messaging Gateway CVE-2017-6327 Remote Code Execution Vulnerability

Bugtraq ID:	100135
Class:	Unknown
CVE:	CVE-2017-6327
Remote:	Yes
Local:	No
Published:	Aug 10 2017 12:00AM
Updated:	Aug 10 2017 12:00AM
Credit:	Philip Pettersson: [email protected]
Vulnerable:	Symantec Messaging Gateway 10.6.3 Symantec Messaging Gateway 10.5.2 Symantec Messaging Gateway 10.5.1 Symantec Messaging Gateway 10.5 Symantec Messaging Gateway 10.0.1 Symantec Messaging Gateway 9.5.4 Symantec Messaging Gateway 9.5.3 Symantec Messaging Gateway 9.5.3-3 Symantec Messaging Gateway 9.5.2 Symantec Messaging Gateway 9.5.1 Symantec Messaging Gateway 9.5 Symantec Messaging Gateway 10.6.3-266 Symantec Messaging Gateway 10.6.2 Symantec Messaging Gateway 10.6.1-3 Symantec Messaging Gateway 10.6.1 Symantec Messaging Gateway 10.6.0-7 Symantec Messaging Gateway 10.6.0-3 Symantec Messaging Gateway 10.6 Symantec Messaging Gateway 10.1 Symantec Messaging Gateway 10.0.3 Symantec Messaging Gateway 10.0.2 Symantec Messaging Gateway 10.0
Not Vulnerable:	Symantec Messaging Gateway 10.6.3-267

Symantec Messaging Gateway CVE-2017-6327 Remote Code Execution Vulnerability

Symantec Messaging Gateway is prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code on the affected system.

Versions prior to Symantec Messaging Gateway 10.6.3-267 are vulnerable.

Symantec Messaging Gateway CVE-2017-6327 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Messaging Gateway CVE-2017-6327 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Messaging Gateway CVE-2017-6327 Remote Code Execution Vulnerability

References:

• Symantec Homepage (Symantec)
  
• SYM17-006: Security Advisories Relating to Symantec Products - Symantec Messagin (Symantec)