CVE-2012-4347 Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1)....
MediumCVSS 5.0
EPSS 58.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec messaging gateway | = 9.5 | No fix listed |
| symantec messaging gateway | = 9.5.1 | No fix listed |
| symantec messaging gateway | = 9.5.2 | No fix listed |
| symantec messaging gateway | = 9.5.3 | No fix listed |
| symantec messaging gateway | = 9.5.4 | No fix listed |
References
- 56789 exploit vdb-entry
- www.symantec.com