CVE-2017-6325: Code Injection
The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6325?
CVE-2017-6325 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2017-6325?
To fix CVE-2017-6325, update to the latest version of Symantec Messaging Gateway beyond 10.6.2.
Which versions of Symantec Messaging Gateway are affected by CVE-2017-6325?
CVE-2017-6325 affects all versions of Symantec Messaging Gateway up to and including version 10.6.2.
What type of vulnerability is CVE-2017-6325?
CVE-2017-6325 is a file inclusion vulnerability commonly found in web applications.
Can CVE-2017-6325 lead to data breaches?
Yes, CVE-2017-6325 can potentially lead to data breaches if exploited to execute arbitrary code.