CVE-2012-4347: Path Traversal

Published Dec 5, 2012

Updated

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.

Affected Software

5 affected components

Symantec Messaging Gateway=9.5

Symantec Messaging Gateway=9.5.1

Symantec Messaging Gateway=9.5.2

Symantec Messaging Gateway=9.5.3

Symantec Messaging Gateway=9.5.4

Event History

Dec 5, 2012

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4347?

CVE-2012-4347 has a moderate severity rating due to the potential for unauthorized access to sensitive files.

How do I fix CVE-2012-4347?

To fix CVE-2012-4347, upgrade your Symantec Messaging Gateway to version 9.5.5 or later.

Which versions of Symantec Messaging Gateway are affected by CVE-2012-4347?

CVE-2012-4347 affects Symantec Messaging Gateway versions 9.5, 9.5.1, 9.5.2, 9.5.3, and 9.5.4.

What type of attack is associated with CVE-2012-4347?

CVE-2012-4347 is associated with directory traversal attacks that allow unauthorized file access.

Who can exploit CVE-2012-4347?

Remote authenticated users with access to the management console can exploit CVE-2012-4347.