PT-2006-4858 · Symantec · Symantec Brightmail Antispam

Publicado 2006-08-07 · Atualizado 2017-07-20 · CVE-2006-4013

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Brightmail AntiSpam (SBAS) versions prior to 6.0.4

Description The issue allows remote attackers to read and overwrite certain files via directory traversal sequences in (1) "DATABLOB-GET" and (2) "DATABLOB-SAVE" requests, when the Control Center is allowed to connect from any computer.

Recommendations For Symantec Brightmail AntiSpam (SBAS) versions prior to 6.0.4, update to version 6.0.4 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2006-4013

Produtos afetados

Symantec Brightmail Antispam

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4013 · Nota de Segurança
• http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html · Aviso do Fabricante
• http://osvdb.org/27590 · Nota
• http://secunia.com/advisories/21223 · Aviso do Fabricante
• http://securitytracker.com/id?1016600 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28059 · Nota
• http://securityfocus.com/bid/19182 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28058 · Nota
• http://osvdb.org/27589 · Nota
• http://vupen.com/english/advisories/2006/3018 · Nota