A security issue has been reported in Symantec Brightmail AntiSpam, which can be exploited by malicious people to bypass security restrictions.

The security issue is caused due to a static database administration password, which can be exploited to gain administrative access to the database containing quarantined messages for review and certain configuration information (only version 6.0 and later).

NOTE: In version 6.0, administrative access was restricted to localhost. However, this restriction is not present on systems prior to this version and is also not imposed on prior versions upgraded to version 6.0 without a clean install.

Solution
Update to version 6.0.2.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2005.05.31a.html

Deep Links
Links available in Customer Area