CVE-2006-4013: Path Traversal
First published: Mon Aug 07 2006(Updated: )
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Brightmail AntiSpam | =6.0 | |
| Symantec Brightmail AntiSpam | =5.5 | |
| Symantec Brightmail AntiSpam | =4.0 | |
| Symantec Brightmail AntiSpam | =6.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html
- http://securitytracker.com/id?1016600
- http://secunia.com/advisories/21223
- http://www.osvdb.org/27589
- http://www.osvdb.org/27590
- http://www.securityfocus.com/bid/19182
- http://www.vupen.com/english/advisories/2006/3018
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28059
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28058
Frequently Asked Questions
What is the severity of CVE-2006-4013?
CVE-2006-4013 has a medium severity rating due to its ability to allow unauthorized remote file access.
How do I fix CVE-2006-4013?
To mitigate CVE-2006-4013, upgrade to Symantec Brightmail AntiSpam version 6.0.4 or later.
What systems are affected by CVE-2006-4013?
CVE-2006-4013 affects Symantec Brightmail AntiSpam versions 4.0, 5.5, and 6.0 up to 6.0.3.
What are the implications of CVE-2006-4013?
Exploitation of CVE-2006-4013 can allow attackers to read and overwrite critical files on the affected systems.
Is CVE-2006-4013 still a concern today?
While CVE-2006-4013 was reported in 2006, it can still pose a risk for users of outdated versions of Symantec Brightmail AntiSpam.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/remedy
- agent/severity
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/symantec
- canonical/symantec brightmail antispam
- version/symantec brightmail antispam/6.0
- version/symantec brightmail antispam/5.5
- version/symantec brightmail antispam/4.0
- version/symantec brightmail antispam/6.0.1