A vulnerability has been reported in various Symantec products, which can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA36422

The vulnerability affects the following products and versions:
* Symantec Mail Security for Domino versions 7.5.6, 7.5.5.32, 7.5.4.29, 7.5.3.25, and 8.0
* Symantec Mail Security for Microsoft Exchange versions 5.0.12, 5.0.11, 5.0.10, 6.0.8, 6.0.7, and 6.0.6
* Symantec Mail Security for SMTP versions 5.0.x
* Symantec Mail Security Appliance/ Symantec BrightMail Appliance versions 5.0.x and later
* Symantec BrightMail Appliance versions 8.0.0 and 8.0.1
* Symantec Data Loss Prevention Enforce/Detection Servers version 7.2
* Symantec Data Loss Prevention Enforce/Detection Servers for Windows versions 8.1.1 and 9.0.1
* Symantec Data Loss Prevention Enforce/Detection Servers for Linux versions 8.1.1 and 9.0.1
* Symantec Data Loss Prevention Endpoint Agents versions 8.1.1 and 9.0.1

Solution
Please see the vendor advisory for a patch matrix.

Provided and/or discovered by
Joshua J. Drake, iDefense Labs

Original Advisory
iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=823

Symantec (SYM09-010):
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers