CVE-2006-4013
Summary
| CVE | CVE-2006-4013 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-08-07 19:04:00 UTC |
| Updated | 2017-07-20 01:32:00 UTC |
| Description | Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests. |
Risk And Classification
Problem Types: CWE-22
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Symantec | Brightmail Antispam | 4.0 | All | All | All |
| Application | Symantec | Brightmail Antispam | 5.5 | All | All | All |
| Application | Symantec | Brightmail Antispam | 6.0 | All | All | All |
| Application | Symantec | Brightmail Antispam | 6.0.1 | All | All | All |
| Application | Symantec | Brightmail Antispam | 4.0 | All | All | All |
| Application | Symantec | Brightmail Antispam | 5.5 | All | All | All |
| Application | Symantec | Brightmail Antispam | 6.0 | All | All | All |
| Application | Symantec | Brightmail Antispam | 6.0.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Symantec Brightmail AntiSpam Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Patch, Vendor Advisory |
| 27590 | OSVDB | www.osvdb.org | |
| Symantec Brightmail AntiSpam Multiple Vulnerabilities | CONFIRM | securityresponse.symantec.com | Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Symantec Brightmail AntiSpam Control Center Multiple Vulnerabilities | BID | www.securityfocus.com | |
| 27589 | OSVDB | www.osvdb.org | |
| SecurityTracker.com Archives - Symantec Brightmail AntiSpam Lets Remote Users Traverse the Directory | SECTRACK | securitytracker.com | Patch |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.