Symantec Brightmail Gateway Control Center Cross Site Scripting Vulnerability

Bugtraq ID:	34641
Class:	Input Validation Error
CVE:	CVE-2009-0063
Remote:	Yes
Local:	No
Published:	Apr 21 2009 12:00AM
Updated:	Apr 30 2009 06:46PM
Credit:	Dr. Marian Ventuneac, Perot Systems, Ireland
Vulnerable:	Symantec Mail Security 8300 Series Appliance 0 Symantec Mail Security 8200 Series Appliance Symantec Brightmail Gateway 8300 Series Appliance 0 Symantec BrightMail Appliance 8.0 Symantec BrightMail Appliance 5.0
Not Vulnerable:	Symantec BrightMail Appliance 8.0.1

Symantec Brightmail Gateway Control Center Cross Site Scripting Vulnerability

Symantec Brightmail Gateway is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Versions prior to Brightmail Gateway 8.0.1 are vulnerable.

Symantec Brightmail Gateway Control Center Cross Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Symantec Brightmail Gateway Control Center Cross Site Scripting Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Symantec Brightmail Gateway Control Center Cross Site Scripting Vulnerability

References:

• Brightmail Homepage (Symantec)
  
• SYM09-005 - Symantec Brightmail Gateway Appliance Cross-site Scripting and Eleva (Symantec)