Published: 07/08/2006 Updated: 20/07/2017

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

VMScore: 676

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4, when the Control Center is allowed to connect from any computer, allow remote malicious users to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec brightmail antispam 5.5
symantec brightmail antispam 6.0
symantec brightmail antispam 6.0.1
symantec brightmail antispam 4.0

CWE-22 http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html http://securitytracker.com/id?1016600 http://secunia.com/advisories/21223 http://www.osvdb.org/27589 http://www.osvdb.org/27590 http://www.securityfocus.com/bid/19182 http://www.vupen.com/english/advisories/2006/3018 https://exchange.xforce.ibmcloud.com/vulnerabilities/28059 https://exchange.xforce.ibmcloud.com/vulnerabilities/28058 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-4013

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect