{"id":"CVE-2017-6326","published":"2017-06-26T21:00:00Z","modified":"2024-08-05T15:25:49Z","title":"The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an…","vendor":"Symantec Corporation","product":"Messaging Gateway","tier":"core","eol":null,"affectedVersions":[{"vendor":"Symantec Corporation","product":"Messaging Gateway","versions":["All versions prior to version 10.6.3"]}],"description":{"text":"The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Symantec Messaging Gateway from Symantec Corporation contains a remote code execution flaw, which allows an individual to run commands on a target machine or within a target process.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:18Z"},"cvss":null,"epss":{"score":0.72759,"percentile":0.99446,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securitytracker.com/id/1038785","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.exploit-db.com/exploits/42251/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securityfocus.com/bid/98893","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-15387","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-15387","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":42251,"url":"https://www.exploit-db.com/exploits/42251","title":"Symantec Messaging Gateway 10.6.2-7 - Remote Code Execution (Metasploit)","type":"remote","platform":"python","date":"2017-06-26","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2017-06-26"},"metasploit":[{"name":"Symantec Messaging Gateway Remote Code Execution","module":"exploit/linux/http/symantec_messaging_gateway_exec","type":"exploit","disclosureDate":"2017-04-26","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_messaging_gateway_exec.rb"}],"first":{"date":"2017-04-26","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_messaging_gateway_exec.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/42251/"],"flow":[],"timeline":[{"date":"2017-04-26","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2017-06-26","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_messaging_gateway_exec.rb","provenance":"source"},{"date":"2017-06-26","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-6326","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9945"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}