CVE-2012-3579 Hardcoded credentials in n/a

What is CVE-2012-3579?

CVE-2012-3579 is a high-severity vulnerability in n/a, published on 29 Aug 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.

Weakness: CWE-264

Which versions are affected by CVE-2012-3579?

It affects 1 product.

Products include Symantec Messaging Gateway.

How do I fix CVE-2012-3579?

No fix has been published for CVE-2012-3579 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-3579 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-3579 exists.

Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2017-6326 Code injection in Messaging Gateway Critical 10.0
• CVE-2018-12242 Auth bypass in Symantec Messaging Gateway Critical 9.8
• CVE-2018-12243 XML external entity in Symantec Messaging Gateway High 8.8
• CVE-2016-2204 Command injection in n/a High 8.2
• CVE-2016-2203 Information disclosure in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gqmh-7vv7-cv43.