Lucene search

K
cve[email protected]CVE-2006-4013
HistoryAug 07, 2006 - 7:04 p.m.

CVE-2006-4013

2006-08-0719:04:00
CWE-22
web.nvd.nist.gov
24
symantec brightmail antispam
sbas
directory traversal
vulnerability
remote attackers
file read
file overwrite
nvd

7 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.213 Low

EPSS

Percentile

96.4%

Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.

7 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.213 Low

EPSS

Percentile

96.4%

Related for CVE-2006-4013