CVE-2017-6327: Symantec Messaging Gateway Remote Code Execution Vulnerability
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.
Other sources
Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6327?
CVE-2017-6327 is rated as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2017-6327?
To mitigate CVE-2017-6327, upgrade Symantec Messaging Gateway to version 10.6.3-267 or later.
What are the potential impacts of CVE-2017-6327?
The potential impacts of CVE-2017-6327 include unauthorized remote execution of commands which can lead to data breaches.
Which versions of Symantec Messaging Gateway are affected by CVE-2017-6327?
CVE-2017-6327 affects all versions of Symantec Messaging Gateway prior to 10.6.3-267.
Is there a workaround for CVE-2017-6327 if I can't upgrade?
There are no effective workarounds for CVE-2017-6327, so upgrading is the recommended action.