Symantec Message Filter cross-site theft Forgery Vulnerability

Release date:
Updated on:

Affected Systems:
Symantec Message Filter
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54133
CVE (CAN) ID: CVE-2012-0303

Symantec Message Filter defends against spam, email fraud, viruses, and other undesirable emails on the Internet gateway in a precise, effective, and easy-to-manage manner.

Symantec Message Filter 6.3 has a cross-site theft Forgery Vulnerability. Attackers can exploit this vulnerability to perform administrator operations and illegally access affected applications.

<* Source: Ben Williams
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Symantec
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.symantec.com/business/security_response/