Description
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.
References
- 1016600 vdb-entry
- 27590 vdb-entry
- 19182 vdb-entry
- 27589 vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html
- ADV-2006-3018 vdb-entry
- brightmail-datablob-directory-traversal(28058) vdb-entry
- brightmail-post-dos(28059) vdb-entry
- 21223 third-party-advisory