Symantec Brightmail Antispam

[Mobo]

A security issue has been reported in Symantec Brightmail AntiSpam, which can be exploited by malicious people to bypass security restrictions.

The security issue is caused due to a static database administration password, which can be exploited to gain administrative access to the database containing quarantined messages for review and certain configuration information (only version 6.0 and later).

NOTE: In version 6.0, administrative access was restricted to localhost. However, this restriction is not present on systems prior to this version and is also not imposed on prior versions upgraded to version 6.0 without a clean install.

Solution:
Update to version 6.0.2.
http://www.symantec.com/techsupp/

Original Advisory:
Symantec:
http://securityresponse.symantec...ecurity...005.05.31a.h tml