CVE-2017-6327

Symantec Messaging Gateway 10.6.3-267 dan oldingi versiyada kodni masofadan bajarish muammosiga duch kelishi mumkin, bunda shaxs maqsadli mashinada yoki maqsadli jarayonda buyruqlarni masofadan bajarish qobiliyatiga ega bo'lishi mumkin bo'lgan vaziyatni tavsiflaydi. Bunday holatda, tizimga kirish huquqiga ega bo'lgandan so'ng, tajovuzkor o'z imtiyozlarini oshirishga harakat qilishi mumkin.

CVSS Vector

Manbalar

• http://seclists.org/fulldisclosure/2017/Aug/28
• http://www.securityfocus.com/bid/100135
• https://www.exploit-db.com/exploits/42519/
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00
• http://seclists.org/fulldisclosure/2017/Aug/28