CVEvulnerability
CVE-2006-4013
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.
Affected configurations
• symantec brightmail antispam 4.0
• symantec brightmail antispam 5.5
• symantec brightmail antispam 6.0
• symantec brightmail antispam 6.0.1
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/21223 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html Patch, Vendor Advisory
- http://securitytracker.com/id?1016600 Patch
- http://www.osvdb.org/27589 www.osvdb.org
- http://www.osvdb.org/27590 www.osvdb.org
- http://www.securityfocus.com/bid/19182 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3018 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28058 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28059 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21223 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html Patch, Vendor Advisory
- http://securitytracker.com/id?1016600 Patch
- http://www.osvdb.org/27589 www.osvdb.org
- http://www.osvdb.org/27590 www.osvdb.org
- http://www.securityfocus.com/bid/19182 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3018 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28058 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28059 exchange.xforce.ibmcloud.com