virus logo Intrusion Prevention

Symantec.Messaging.Gateway.Save.do.CSRF

description-logoDescription

This indicates an attack attempt to exploit a Cross Site Request Forgery vulnerability in Symantec messaging gateway.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and create additional administrator user in the system.

affected-products-logoAffected Products

Symantec Messaging Gateway 9.5.x

Impact logoImpact

Security Bypass: Remote attackers can bypass security checks of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120827_00

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://www.exploit-db.com/exploits/23109/ http://www.nccgroup.com/en/learning-research-centre/security-testing-audit-compliance-resources/technical-advisories/symantec-messaging-gateway-easy-csrf-to-add-a-backdoor-administrator/#.UMEpKeQqbl9
ID 34129
Created Dec 31, 2012
Updated Mar 04, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2012-0308
Exploit Prediction Score 4.31%
Default Action drop
Active
Affected OS Other
Affected App Other